|
|
|
|
摘要：
GSI近日在一篇KB中对于新的EX01证据文件结构进行了解释： What New Features are Offered by the EX01 Evidence File Format?Affected Products:EnCase Forensic 7.xSummary:EnCase V7 allows for the creation of EX01 files. This evidence file format retains many of the features of E01 files and adds several new features.Explanation/R 阅读全文
posted @ 2011-08-13 15:42 YiDiscovery 阅读(604) 评论(0) 推荐(0) 编辑
摘要：
在前面的文章中我们提到过，EnCase v7由于采用了全新的证据文件格式*.ex01，支持全新的压缩方式，关于此种压缩方式的效率，Guidance官方近日给出了相关KB An Overview of Compression Levels in EnCase Version 7Affected Products:EnCase Version 7Summary:This documentexplains compression concepts and compression results using EnCase Version 7.Explanation/Resolution:Compres 阅读全文
posted @ 2011-08-13 15:20 YiDiscovery 阅读(634) 评论(0) 推荐(0) 编辑 |
|