| Description |
1 online resource (1 volume) : illustrations |
| Contents |
The road to readiness -- Getting started -- EnCase concepts -- Adding evidence -- Processing evidence -- Documenting evidence -- Further inspection -- Analyzing the case -- Keywords and searching -- Conditions and filters -- Hash analysis and timelines -- Reporting -- Wrapping up the case -- EnCase portable and app central -- An EnScript primer |
| Summary |
This book reveals, step by step, how to detect illicit activity, capture and verify evidence, recover deleted and encrypted artifacts, prepare court-ready documents, and ensure legal and regulatory compliance. It illustrates each concept using downloadable evidence from the National Institute of Standards and Technology CFReDS. Customizable sample procedures are included throughout this practical guide. You will learn how to: install EnCase Forensic v7 and customize the user interface; prepare your investigation and set up a new case; collect and verify evidence from suspect computers and networks; use the EnCase Evidence Processor and Case Analyzer; uncover clues using keyword searches and filter results through GREP; work with bookmarks, timelines, hash sets, and libraries; handle case closure, final disposition, and evidence destruction; carry out field investigations using EnCase Portable; learn to program in EnCase EnScript. -- Edited summary from book |
| Notes |
Includes index |
|
Print version record |
| Subject |
Computer crimes -- Investigation.
|
|
Computer crimes -- Investigation -- Computer programs
|
|
COMPUTERS -- Security -- General.
|
|
Computer crimes -- Investigation
|
| Form |
Electronic book
|
| ISBN |
9780071807920 |
|
0071807926 |
|
