<<< Case Processor | Index | Case Processor - Recovering Graphics >>> |
EnScript->Forensic->Case Processor
Specify "Time Zone Info" when asked for the Bookmark folder.
Proceed to Modules->Case Initializers->Windows Initialize Case and select this module.
Double-click Windows Initialize Case to display additional options.
Select Timezone.
Click OK, the module will run.
When finished, go to Bookmarks tab, locate "Time Zone Info" bookmark, and switch to Report view to see the results.
Go to Cases->Entries->Home and change the time zone settings for each device: right-click and then Modify time zone settings...
For more information see EnCase Student's Guide Lesson 27, pages 298-302.
<<< Case Processor | Index | Case Processor - Recovering Graphics >>> |