取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.



My friend told me that she installed EnCase v8.05 on her workstation which OS version is Win 10. She conducted an index search but no any hits found in results.

I told her not to jump to conclusions too soon. For caution's sake, I install EnCase v8 on my laptop which OS version is Win 10. Fortunately my index search works fine and I could got search results without fail.

Furthermore we install EnCase v8 on several computers which OS version is Win 10 to verify. Guess what? Some computers OK but some don't get any index search results. I think those computers that fail to get index search results may have something in common. I try to figure it out what's wrong with those computers but in vain.

Anyone who uses EnCase on Win 10 may bump into the same situation. I'd appreciate your providing me any infomation you have. Thanks a lot.

posted on 2017-07-24 21:07  Pieces0310  阅读(312)  评论(2编辑  收藏  举报