A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make
Posted: Mon Aug 01, 2022 9:51 am
A hard drive was imaged using EnCase. The original drive was placed into evidence. The restore feature was used to make a copy of the original hard drive.
EnCase verifies the restored copy using:
A. An MD5 hash
B. A 32 bit CRC
C. Nothing. Restored volumes are not verified.
D. A running log
EnCase verifies the restored copy using:
A. An MD5 hash
B. A 32 bit CRC
C. Nothing. Restored volumes are not verified.
D. A running log