The EnCase methodology dictates that the lab drive for evidence have a __________ prior to making an image.
GREP terms are automatically recognized as GREP by EnCase.
When a non-compressed evidence file is reacquired with compression, the acquisition and verification hash values for the evidence will remain the same for both files.
By default, what color does EnCase use for slack?