Details.
Thorough investigation and analysis of a hard drive or infected system using EnCase software. Includes inspection of the whole unit or individual drive, vulnerability and issue identification, metadata preservation, evidence recording in an EnCase evidence layout, data categorisation, comprehensive searches, and analysis of where data was found, which user created it, and when it was last used.