Description
EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection.
References
- [Forensics] 20050511 DCO discovery & removal, capabilities of imaging & wiping tools mailing-list
- 15340 third-party-advisory