In this video lecture I cover how to add new evidence to your case, how to use manual carving to recover deleted files from unallocated space, and how to use the powerful indexed search to identify keywords in your case.
Timeline:
Adding new evidence items to your case: 49 seconds