Hi,

For the current release of EnCase 8 (8.09), the RAW search results can be found by accessing the View menu, then Keyword Hits.

Regards

Hi,

Can I assume you are looking for deleted $I files?

I'm not aware of an EnScript that will recover these from the Unallocated Clusters (that doesn't mean one has not been written).

What so ...

Hi,

When the tabs disappear, what does the title bar of EnCase say?

Normally it should show something like EnCase Forensic or EnCase EndPoint Investigator, however if this changes to EnCase Acqu ...

EnCase 8 can also be used to preview and acquire across a network connection.

If you use the direct agent (tools > Create Direct Agent), and place it onto a USB thumb drive, it can be launched dire ...

Hi,

The issue you are describing might be due to screen resolution, or if the font type and/or size have been adjusted (from the Tools > Options menu).

Just a couple of thoughts.

Out of curio ...

Excellent, i’m pleased they exported ok...

Regards

So are you copying the files from Results (Results Set) or Entries? and these are regular office documents, not deleted, nor data carved?

Have they been mounted as a compound file?

Also is this ...