Notifications
Clear all
Topic starter
01/01/2013 12:31 pm
Happy New Year!
I have an evidence files (e01) that i process in both EnCase 6 and 7. Using the same search parameters like whole word etc…., and I also leave out the tick for file slack etc in both instances.
The problem is that I got more search hits in EnCase 7 then in 6. Anyone has similar encounter and if possible explain why this happen? Thanks.
01/01/2013 1:37 pm
if I remember well in V7 some datatypes are also automatically transcripted even for raw search, this can explain some extra hits