Automated filesyste...
 
Notifications
Clear all

Automated filesystem/partition analyse within Encase

3 Posts
3 Users
0 Reactions
984 Views
(@geggs)
New Member
Joined: 6 years ago
Posts: 2
Topic starter  

Hello,

I'm trying to figuring out the advantages and disadvantages of using automated filesystem/partition analysis within EnCase vs Manual Analysis by a Practioner.

I've googled it but could not find any information. Can anyone help me out, direct me to any link where I can read more about filesystem analysis using Encase.

Thank

GG


   
Quote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

'm trying to figuring out the advantages and disadvantages of using automated filesystem/partition analysis within EnCase vs Manual Analysis by a Practioner.

Well, the best way to attack that is probably to test various cases. Make a file system, test it with EnCase, and figure out what you would need to manually to produced the same results. Repeat.

You can find some relevant tests at http//dftt.sourceforge.net/, but you will almost certainly need to create your own in order to cover all options.


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

I'm trying to figuring out the advantages and disadvantages of using automated filesystem/partition analysis within EnCase vs Manual Analysis by a Practioner.

Taking a step back for a moment, what are you ultimately trying to accomplish?

Tools like EnCase are great for data parsing and presentation, but the ultimate "analysis" needs to be accomplished by a knowledgeable practitioner, based on the goals of the investigation.


   
ReplyQuote
Share: