August 2017
Beginner to intermediate
274 pages
8h 11m
English
To use the EnCase Evidence Processor, you should create a case and add an evidence item. You already created a case to examine the recycle bin, so you can use that case here. If it's not available, create a new one and add an image to it. Once done, you are ready to use the EnCase Evidence Processor and the Windows Artifact Parser.
Read now
Unlock full access