EnCase Computer Forensics, 3rd Edition

EnCase Computer Forensics — The Official EnCE: EnCase Certified Examiner Study Guide
The official, Guidance Software-approved book on the newest EnCE exam!

The EnCE exam tests that computer forensic analysts and examiners have thoroughly mastered computer investigation methodologies, as well as the use of Guidance Software’s EnCase Forensic 7. The only official Guidance-endorsed study guide on the topic, this book prepares you for the exam with extensive coverage of all exam topics, real-world scenarios, hands-on exercises, up-to-date legal information, and sample evidence files, flashcards, and more.

• Guides readers through preparation for the newest EnCase Certified Examiner (EnCE) exam
• Prepares candidates for both Phase 1 and Phase 2 of the exam, as well as for practical use of the certification
• Covers identifying and searching hardware and files systems, handling evidence on the scene, and acquiring digital evidence using EnCase Forensic 7
• Includes hands-on exercises, practice questions, and up-to-date legal information
• Sample evidence files, Sybex Test Engine, electronic flashcards, and more

If you’re preparing for the new EnCE exam, this is the study guide you need.

Table of Contents

Chapter 1: Computer Hardware
Chapter 2: File Systems
Chapter 3: First Response
Chapter 4: Acquiring Digital Evidence
Chapter 5: EnCase Concepts
Chapter 6: EnCase Environment
Chapter 7: Understanding, Searching For, and Bookmarking Data
Chapter 8: File Signature Analysis and Hash Analysis
Chapter 9: Windows Operating System Artifacts
Chapter 10: Advanced EnCase
Appendix A: Answers to Review Questions
Appendix B: Creating Paperless Reports
Appendix C: About the Additional Study Tools