Windows Forensics Cookbook

How to do it...

The steps for Recycle bin Content Analysis in Encase Forensic are as follows:

1. Let's start by creating a new case. To do this, click on the New Case link on the left. The Case Options window will pop up, as you see in the following figure:

Figure 7.1. Case Options

2. We have chosen #2 Forensic template, and there is a lot of information to fill in. Let's start with Case information. Here, we have 6 fields to fill in: Case Number, Case Data, Examiner Name, Examiner I.D., Agency, and Description. All fields are self-explanatory, so just fill them in.
3. Let's go to Name and location. Type your case's name or number in the first field, ...