Encase Evidence Pro...
 
Notifications
Clear all

Encase Evidence Processer - Evidence is encrypted message

2 Posts
2 Users
0 Likes
1,667 Views
 mran
(@mran)
Posts: 1
New Member
Topic starter
 

Hi all,

 

I've added the evidence and also entered the recovery password. This showed the file listing successfully. However when I tried to process the evidence, I had an error pop up message to say that the evidence is encrypted and no valid image found.

 

This image was taken (Dell Latitude) and successfully verified using FTK imager. Has anyone encountered this issue before?

 
Posted : 18/05/2021 2:28 am
(@gsibat)
Posts: 12
Active Member
 
Posted by: @mran

Hi all,

 

I've added the evidence and also entered the recovery password. This showed the file listing successfully. However when I tried to process the evidence, I had an error pop up message to say that the evidence is encrypted and no valid image found.

 

This image was taken (Dell Latitude) and successfully verified using FTK imager. Has anyone encountered this issue before?

Likely to be the case that once you entered the credentials to authenticate, you need to go back to the evidence view and click on the hyperlinked name of the device and cause EnCase to re-read and refresh the view.

This post was modified 3 years ago by Gsibat
 
Posted : 14/06/2021 11:37 am
Share: