Notifications
Clear all
Topic starter
28/05/2014 1:12 am
I swear we did this in training, but can anyone recall if/how you can repoint the cache in EnCase v7? Processing times are so slow I'm about to throw my FRED out the window. If a dedicated cache disk doesn't do it, I may become a FTK or X-ways convert.
28/05/2014 4:22 am
Next to the "Rescan" button on the side-bar menu when viewing the evidence.
28/05/2014 12:28 pm
As said JHUP In the tab evidence "changes caches" button.
28/05/2014 4:55 pm
It is called "Update Paths" with a icon that looks like the Undo blue arrow, counter clockwise wrap, starting at 6 ending at 9.
Topic starter
28/05/2014 8:53 pm
Many thanks. That helped.
