⇤ ← Revision 1 as of 2010-05-17 14:13:01
648
Comment:
|
← Revision 2 as of 2010-05-17 14:13:26 ⇥
708
|
Deletions are marked like this. | Additions are marked like this. |
Line 10: | Line 10: |
Tratto da: https://support.guidancesoftware.com/node/136 |
The steps outlined below will populate the Hash Set and Hash Category columns of the Table pane in EnCase.
With your evidence loaded in EnCase, click Search.
- Place a check in the box for "Compute hash value" and make sure everthing else is unchecked, then click "Start".
- After the Search function completes, click "View" then click "Hash Sets".
- Select the Hash Set(s) of interest in the Table pane.
- Right-click in the Table pane and select Rebuild Library.
When EnCase finishes rebuilding the library, click OK.
- Click View the Cases to return to the Case View.