Summary: Hoe Werkt Encase7
- This + 400k other summaries
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding
Read the summary and the most important questions on Hoe werkt Encase7
-
1 Hoe werkt Encase7
This is a preview. There are 20 more flashcards available for chapter 1
Show more cards here -
If you attempt to change the case information within an EnCase evidence file, the verification feature will report an error. True or false?
True -
If you add a partition to an EnCase evidence file, the added partition is stored in the metadata portion of the EnCase evidence file. True or false?
False -
The examiner can change the logical name of the EnCase evidence file, but the file will no longer successfully verify. True or false?
False -
Are two algorithms available within EnCase to verify the integrity of an entire evidence file.
MD5, SHA1 -
Text styles in EnCase 7 are stored in two locations, one location for text styles that ship with EnCase and another for user-created text styles. True or false?
True -
EnCase case files should be archived after the examination is completed, using the Create Package feature. True or false?
True -
Searches using keywords are stored in files with the file extension
.keywords -
files contain pointers to the evidence files.
case -
Using standard EnCase methodology or best practices, you should create a unique directory on the lab or storage drive for case management before you acquire evidence. True or false?
True -
Using standard EnCase methodology or best practices, you should give the volume a unique label or name prior to using it as a target drive on which to store an EnCase evidence files. True or false?
True
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding