A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive.
EnCase verifies the restored copy using:
A. An MD5 hash
B. A 32 bit CRC
C. Nothing. Restored volumes are not verified.
D. A running log
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!