Notifications
Clear all
Topic starter
25/10/2017 8:59 am
In my previously article "EnCase missed some USB activities in the evidence files", I mentioned about that EnCase could only "see" few USB records. Actually not only EnCase may not see all USB records, some other forensic tools got the same problems.
What else could help us to find the missing USB Records? You guys could take a look at my blog as below
http//