iv
EnCase Forensic Version 6.11 Userʹs Guide
Contents
Viewing More Columns ....................................................................................................................... 146
Viewing Fewer Columns...................................................................................................................... 146
Viewing More Rows ............................................................................................................................. 147
Viewing Fewer Rows............................................................................................................................ 147
Timeline Tab .......................................................................................................................................... 147
Modifying the View Pane .......................................................................................................................... 148
Copy........................................................................................................................................................ 148
Goto......................................................................................................................................................... 148
Find ......................................................................................................................................................... 149
CHAPTER 6 Case Management
151
Overview of Case Structure....................................................................................................................... 152
Case Management ................................................................................................................................. 152
Concurrent Case Management............................................................................................................ 153
Indexing a Case ..................................................................................................................................... 153
Case File Format .................................................................................................................................... 154
Case Backup........................................................................................................................................... 155
The Options Dialog ............................................................................................................................... 155
Case Related Features ................................................................................................................................ 157
Logon Wizard ........................................................................................................................................ 158
Logon Wizard Users Page.................................................................................................................... 159
Users Right‐Click Menu ....................................................................................................................... 159
Browse for Folder Dialog ..................................................................................................................... 160
SAFE Page of the Logon Wizard......................................................................................................... 161
SAFE Right‐Click Menu ....................................................................................................................... 161
Browse for Folder Dialog ..................................................................................................................... 162
Edit SAFE Dialog................................................................................................................................... 163
New Case Wizard ....................................................................................................................................... 166
Role Page of the New Case Wizard .................................................................................................... 167
Case Options Page of the New Case Wizard..................................................................................... 168
Add Device............................................................................................................................................. 168
Using a Case ................................................................................................................................................ 169
Modifying Case Related Settings ........................................................................................................ 169
Time Zone Settings................................................................................................................................ 170
Case File Time Zones ............................................................................................................................ 171
Evidence File Time Zones .................................................................................................................... 172
Setting Time Zones Settings for Case Files ........................................................................................ 172
Setting Time Zone Options for Evidence Files.................................................................................. 173
General Time Zone Notes .................................................................................................................... 174
FAT, HFS and CDFS Time Zone Specifics ......................................................................................... 174
Time Zone Example .............................................................................................................................. 175
Open a Case ................................................................................................................................................. 175
Saving a Case............................................................................................................................................... 176
Saving a Case ......................................................................................................................................... 176
Saving a Case With a New Name or New Location......................................................................... 176
Saving a Case and the Global Application Files ............................................................................... 177
Close Case .................................................................................................................................................... 177