This question addresses the EnCase for Windows search process. If a target word is within a logical file, and it begins in cluster 10 and ends in cluster 15 (the word is fragmented), the search:
- Will find it because EnCase performs a logical search.
- Will not find it unless ile slack?is checked on the search dialog box. Will not find it unless ?ile slack?is checked on the search dialog box.
- Will not find it because EnCase performs a physical search only.
- Will not find it because the letters of the keyword are not contiguous.
Reveal Solution
Next Question