How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence f

Business, Finance, Economics, Accounting, Operations Management, Computer Science, Electrical Engineering, Mechanical Engineering, Civil Engineering, Chemical Engineering, Algebra, Precalculus, Statistics and Probabilty, Advanced Math, Physics, Chemistry, Biology, Nursing, Psychology, Certifications, Tests, Prep, and more.
Post Reply
answerhappygod
Site Admin
Posts: 899604
Joined: Mon Aug 02, 2021 8:13 am

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence f

Post by answerhappygod »

How does EnCase verify that the case information (Case Number, Evidence Number, Investigator Name, etc) in an evidence file has not been damaged or changed, after the evidence file has been written?

A. The .case file writes a CRC value for the case information and verifies it when the case is opened.
B. EnCase does not verify the case information and case information can be changed by the user as it becomes necessary.
C. EnCase writes a CRC value of the case information and verifies the CRC value when the evidence is added to a case.
D. EnCase writes an MD5 hash value for the entire evidence file, which includes the case information, and verifies the MD5 hash when the evidence is added to a
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!

This topic has 1 reply

You must be a registered member and logged in to view the replies in this topic.


Register Login
 
Post Reply