1. Can any one can describe diff between Fast bloc and Write-bloc?
2. How much time we usually require to image a 160 GB hard Disc(GOOD working)?
3. why encase is not showing certain keywords as search results while the keywords exists in the hard disk image?
with regards
spring
1. Fastbloc is a trade name of a particular write blocker.
2. Depends on the hard drive type and interface, compression and data on the disk, the location the image is being sent to and the software and hardware used to create the image.
3. Not enough info, but it will probably be because of user fault. See https://support.guidancesoftware.com
In what type of file did the keyword exist in the image?
1. Fastbloc is a trade name of a particular write blocker.
2. Depends on the hard drive type and interface, compression and data on the disk, the location the image is being sent to and the software and hardware used to create the image.
3. Not enough info, but it will probably be because of user fault. See https://support.guidancesoftware.com
is encase will search keywords in Encrypted files?
1. Fastbloc is a trade name of a particular write blocker.
2. Depends on the hard drive type and interface, compression and data on the disk, the location the image is being sent to and the software and hardware used to create the image.
3. Not enough info, but it will probably be because of user fault. See https://support.guidancesoftware.comis encase will search keywords in Encrypted files?
No idea, don't use it. Why not visit https://support.guidancesoftware.com ?
If your keyword exists in an encrypted file EnCase will not usually find it.
You will have to decrypt the encrypted file(s) files and search these seperately with EnCase.