Chapter 14 Forensics Investigation Using EnCase
Exam objectives in this chapter:
What Is an Evidence File?
Hashing
How You Acquire a File Image
Configuring EnCase
The Searching Ability of EnCase
The Bookmark
Recovering Deleted Files/Folders in ...
Get The Official CHFI Study Guide (Exam 312-49) now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.