Chapter 14 Forensics Investigation Using EnCase

Exam objectives in this chapter:

image What Is an Evidence File?

image Hashing

image How You Acquire a File Image

image Configuring EnCase

image The Searching Ability of EnCase

The Bookmark

Recovering Deleted Files/Folders in ...

Get The Official CHFI Study Guide (Exam 312-49) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.