Chapter 7
Understanding, Searching For, and Bookmarking Data
EnCE Exam Topics Covered in This Chapter:
- Understanding data
- EnCase Evidence Processor
- Conducting basic searches
- Conducting advanced GREP searches
- Bookmarking your findings
- Organizing your bookmarks and creating reports
- Indexed searches
We’ve heard it said, and we’ll hear it said again: “It’s all about the 1s and the 0s.” Computers store or transmit data as strings of 1s and 0s in the form of positive and negative states or pulses. From that we get characters and numbers, all of which make up the data we find on computer systems. This chapter will begin with a review of binary numbers and their hexadecimal representations.
Once you understand how data is stored, you’ll then want ...
Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
