The official, Guidance Software-approved book on the newest EnCE exam! The EnCE exam tests that computer forensic analysts and examiners have thoroughly mastered computer investigation methodologies, as well as the use of Guidance Software's EnCase Forensic 7. The only official Guidance-endorsed study guide on the topic, this book prepares you for the exam with extensive coverage of all exam topics, real-world scenarios, hands-on exercises, up-to-date legal information, and sample evidence files, flashcards, and more.
- Guides readers through preparation for the newest EnCase Certified Examiner (EnCE) exam
- Prepares candidates for both Phase 1 and Phase 2 of the exam, as well as for practical use of the certification
- Covers identifying and searching hardware and files systems, handling evidence on the scene, and acquiring digital evidence using EnCase Forensic 7
- Includes hands-on exercises, practice questions, and up-to-date legal information
- Sample evidence files, Sybex Test Engine, electronic flashcards, and more
If you're preparing for the new EnCE exam, this is the study guide you need.
Introduction xxi
Assessment Test xxvii
Chapter 1 Computer Hardware 1
Computer Hardware Components 2
The Boot Process 14
Partitions 20
File Systems 25
Summary 27
Exam Essentials 27
Review Questions 28
Chapter 2 File Systems 33
FAT Basics 34
The Physical Layout of FAT 36
Viewing Directory Entries Using EnCase 52
The Function of FAT 58
NTFS Basics 73
CD File SlA
![EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide [Paperback]](/itemImage/2/9/9/0/2_5360590.jpg "EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide [Paperback]")