EnCase® FIM

The Field Intelligence Model (FIM) is an investigative solution available only to local law enforcement. Based on the powerful EnCase® Forensic, this network-enabled investigative solution dramatically simplifies and accelerates field investigations of network-connected computers and servers. The FIM offers investigators powerful capabilities to search computers across a network and analyze all of the relevant information, including volatile data that is traditionally lost during forensic investigations.

Product Features
  • Acquire data in a forensically sound manner using software with an unparalleled record in courts worldwide.
  • Logical Evidence Files allow investigators to acquire only relevant data, preserving metadata on an individual-file basis, which eliminates the need to capture entire hard drives.
  • Investigate and analyze multiple platforms — Windows, Linux, AIX, BSD, OS X, Solaris and more — using a single tool.
  • Securely investigate/analyze computer, while they're up and running, at a disk level.
  • Overcome the challenges associated with RAID arrays and encrypted volumes by acquiring evidence from live servers.
  • Discretely carry out investigations without alerting suspects.
  • Transfer evidence files directly to other parties, such as legal representatives, as necessary.
  • Quickly triage machines to determine if incriminating evidence exists before acquiring the data.

    EnCase Training Schedule