H11 Digital Forensics.com
EnCase Forensic Version 6
From the simplest requirements to the most complex, EnCase® Forensic is the premier computer forensic application on the market. It gives investigators the ability to image a drive and preserve it in a forensic manner using the EnCase evidence file format (LEF or E01), a digital evidence container validated and approved by courts worldwide.
Key Benefits
- Unsurpassed court acceptance
- Recognized worldwide as the de facto standard for computer forensics
- Analyze target machines at a deeper level
Key Features
- Advanced search options
- Internet and email support
- Court validated Logical Evidence File format
- Multiple viewers
- Instant message analysis
- EnScript® programming
- Bookmarking
- Support for the most system files
- Multiple acquisition options
EnCase Forensic
EnCase Forensic also contains a full suite of analysis, bookmarking and reporting features. Guidance Software and third party vendors provide support for expanded capabilities to ensure that forensic examiners have the most comprehensive set of utilities.
EnScripts and customizable filters allow examiners of all experience levels can quickly parse out relevant data for further review with pre-built EnScripts or by developing their own EnScript tools.
EnCase Forensic also offers powerful hidden volume detection and volume rebuilding capabilities, allowing investigators to review evidence that would have been irretrievable with other computer forensics applications.
