2. Case File

• The .Case file contains all configuration parameters:

  • search hits

  • bookmarks

  • hash analysis

  • signature analysis

• In EnCase 7 multiple files are used within the case folder.