FDR FORENSIC DATA RECOVERY INC. :

- • Computer Forensics
- • eDiscovery and ESI Preservation
- • Expert Witness Testimony
- • Data Recovery
- • Criminal Investigations
- • Case Studies
- • Theft of Intellectual Property
- • Public Speaking Engagements
- • Online Intelligence Services
- • Testimonials
- • Corporate Profile
- • Computer Forensics and Digital Investigation Experts
- • Affiliations
- • Memberships
- • Careers
- • Newsroom

EnCase® Enterprise Pro Suite

EnCase® Enterprise has changed the landscape of enterprise and computer investigations by providing complete network visibility, immediate response and comprehensive, forensic-level analysis of servers and workstations anywhere on a network. EnCase® ProSuite consists of the EnCase® Virtual File System, EnCase® Physical Disk Emulator and EnCase® Decryption Suite. This powerful combination of integrated tools facilitates seamless sharing of evidentiary data and solves the resource drain of encrypted data. This gives investigators maximum flexibility during investigations and also helps mask complexity when forensic data is shared with untrained individuals.1

Product Features

EnCase® Virtual File System*

Mounts evidence at the cases, case, device, volume, or folder level as a read-only network share. (It appears as a network share to the local operating system but the share is not available to other users over the network).
VFS provides an easy platform for information or evidence review in a read-only state outside of the EnCase® environment.
Provides an intuitive platform for evidence to be reviewed by case agents/investigators, opposition experts, prosecutors and defense counsel.
Files contain the same file system artifacts as contained in EnCase®, including all allocated files, deleted files, internal system files as well as alternate data streams and unallocated space.

EnCase® Physical Disk Emulator*

Mounts images of hard drives or CDs as read-only local drives.
Enables the use of third party tools on forensic data exposed by EnCase®.
When using VMware, PDE enables the examiner to boot and interact with the computer in the same state as it was when the evidence was captured.
Provides a platform for juries to view digital evidence in a way that they may better understand.

EnCase® Decryption Suite*

Support for Microsoft® Encrypting File System (EFS) encrypted files and folders, including domain-authenticated accounts.
Support for decryption of PC Guardian® and Utimaco® disk-based encryption products.

EnCase Training Schedule