Encase Evidence Pro...
 
Notifications
Clear all

Encase Evidence Processer - Evidence is encrypted message

mran
 mran
(@mran)
New Member

Hi all,

 

I've added the evidence and also entered the recovery password. This showed the file listing successfully. However when I tried to process the evidence, I had an error pop up message to say that the evidence is encrypted and no valid image found.

 

This image was taken (Dell Latitude) and successfully verified using FTK imager. Has anyone encountered this issue before?

Quote
Topic starter Posted : 18/05/2021 3:28 am
Gsibat
(@gsibat)
New Member
Posted by: @mran

Hi all,

 

I've added the evidence and also entered the recovery password. This showed the file listing successfully. However when I tried to process the evidence, I had an error pop up message to say that the evidence is encrypted and no valid image found.

 

This image was taken (Dell Latitude) and successfully verified using FTK imager. Has anyone encountered this issue before?

Likely to be the case that once you entered the credentials to authenticate, you need to go back to the evidence view and click on the hyperlinked name of the device and cause EnCase to re-read and refresh the view.

This post was modified 3 months ago by Gsibat
ReplyQuote
Posted : 14/06/2021 12:37 pm
Share: