Forums
Main Category
General (Technical,...
EnCase need help.
 
Notifications
Clear all

EnCase need help.

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by mansiu 13 years ago
5 Posts
5 Users
0 Likes
426 Views
RSS
 Hopper
(@hopper)
Posts: 1
New Member
Topic starter
 

I’m really new to this. First term at tech school, major computer forensics.
This is my first assignment and I’m not sure I’ve got all the answers right. Anybody out there who can answer those questions?

1. Can EnCase be used to analyze Windows 7 backup files? If so, how?
2. Can EnCase be used to analyze Android smart phone files? If so, how
3. Which computer forensic tools can be used to find and analyze hidden information stored in BIOS?
4. Can a computer user hide information in a graphic controller memory? If so, how?

Thanks for helping.

 
Posted : 14/04/2011 5:21 pm
 michael556
(@michael556)
Posts: 12
Active Member
 

Speaking as kind of a beginner myself, the best advice I can give is spend time experimenting with EnCase. Play about with it and do a load of practice investigations, rather than just using specific bits of EnCase to answer specific questions. There are also a number of other tools I'd use in conjunction with EnCase, especially FTK, Registry Viewer and anti-steganography programs. You'll also find some useful stuff by looking through the EnScripts.
The registry is also a good place to look for answers to some of your questions.

As for Android phones - if they can be plugged into a PC as external storage devices, they can also be previewed, acquired and imaged just like any other storage device.

 
Posted : 14/04/2011 9:24 pm
 Xennith
(@xennith)
Posts: 177
Estimable Member
 

Are those the homework questions verbatim? Or did you paraphrase them?

 
Posted : 07/05/2011 5:12 am
 Georgefan
(@georgefan)
Posts: 27
Eminent Member
 

This is the Encase Forum
https://support.guidancesoftware.com/forum/
Maybe you can find answers here

 
Posted : 07/05/2011 10:05 am
 mansiu
(@mansiu)
Posts: 83
Trusted Member
 

This is the Encase Forum
https://support.guidancesoftware.com/forum/
Maybe you can find answers here

im afraid he doesnt have a guidance forum account

 
Posted : 08/05/2011 7:11 pm
Forum Jump:
  Previous Topic
Next Topic  
Share: