Will EnCase allow a user to write data into an acquired evidence file?
Posted: Mon Aug 01, 2022 9:51 am
Will EnCase allow a user to write data into an acquired evidence file?
A. No. Data cannot be added to the evidence file after the acquisition is made.
B. Yes, but only bookmarks.
C. Yes, but only case information.
D. No, unless the user established a writing privilege when the evidence was acquired.
E. Yes, but only to resize the partitions.
A. No. Data cannot be added to the evidence file after the acquisition is made.
B. Yes, but only bookmarks.
C. Yes, but only case information.
D. No, unless the user established a writing privilege when the evidence was acquired.
E. Yes, but only to resize the partitions.