If an evidence file has been added to a case and completely verified, what happens if the data area within the evidence file is later changed?

Question

Options

• AEnCase will detect the error when that area of the evidence file is accessed by the user.
• BEnCase detect the error if the evidence file is manually re-verified.
• CEnCase will allow the examiner to continue to access the rest of the evidence file that has not
• DAll of the above.

• A
  9% (2)
• B
  4% (1)
• C
  17% (4)
• D
  70% (16)

No community discussion yet for this question.