DiscoverwhereisyourdataComputer Forensics: Examining File Slack with EnCase
Computer Forensics: Examining File Slack with EnCase

Computer Forensics: Examining File Slack with EnCase

Update: 2008-08-31
Share

Description

Demonstrating File slack with with EnCase. File slack can, sometimes, contain information relevant to a case. Even if it does not its important for computer forensics examiners to understand the difference between active files, deleted files, and slack hits.
Comments 
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Computer Forensics: Examining File Slack with EnCase

Computer Forensics: Examining File Slack with EnCase

whereisyourdata