EnCase Configuration Files

Prior to EnCase 7, global configuration settings for EnCase were stored in a series of initialization files (dubbed ini files after their file extension). By default they were all stored in \Program Files\Encase#\Config, and they were all applied globally to every instance of EnCase, regardless of the user on the system.

EnCase 7 has certainly undergone a significant change in the way configuration files are stored. Starting with Windows Vista, Microsoft became more security conscious and encouraged programmers to separate program data from user data because of security permissions for the different data types. Also, the user could go to one general area for user files and thereby stay away from critical program and ...

Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.