Encase 7 does not hash the entire L01x file; it only hashes the individual files in the logical evidence file. Since it doesn't hash the entire logical evidence file, there won't be an acquisition hash in the header data of the file as there would be with an E01x file.
↧