Computer Forensics and Digital Investigation with EnCase Forensic v7

Conduct repeatable, defensible investigations with EnCase Forensic v7Maximize the powerful tools and features of the industry-leading digital investigation software. Computer Forensics and Digital Investigation with EnCase Forensic v7 reveals, step by step, how to detect illicit activity, capture and verify evidence, recover deleted and encrypted artifacts, prepare court-ready documents, and ensure legal and regulatory compliance. The book illustrates each concept using downloadable evidence from the National Institute of Standards and Technology CFReDS. Customizable sample procedures are included throughout this practical guide. Install EnCase Forensic v7 and customize the user interfacePrepare your investigation and set up a new caseCollect and verify evidence from suspect computers and networksUse the EnCase Evidence Processor and Case AnalyzerUncover clues using keyword searches and filter results through GREPWork with bookmarks, timelines, hash sets, and librariesHandle case closure, final disposition, and evidence destructionCarry out field investigations using EnCase PortableLearn to program in EnCase EnScript