Arne Vidström has reported a weakness in EnCase, which can be exploited to hide information on a disk. The weakness is caused due to missing support of Device Configuration Overlays (DCO) and therefore causes the program to not acquire parts of a disk using this feature. The weakness has been reported in EnCase Forensic Edition 4.18a. Other versions may also be affected…
