i have important issue about encase
does anyone know answer of this question
we have server image that includes 20 client back up files about 30 days
every day back up files includes same files and changed files
example client one 1stday directory + client one 2nd directory + new files = 2 same files and new files
we want to filter same files but we also need 1 copy of same files and new files
please help forensics world
Not totally sure what you mean.
Are you looking for a way in Encase to filter out duplicates?
Would hashing all your files, then using a filter by hash allow you as kbertens suggested to separate duplicate values?
This would then allow you to see which files are unique i.e. "new files" and any files that are duplicates would be your "client one 1stday directory + client one 2nd directory".