EnCase® Forensic Version 6

EnCase® Forensic gives investigators in law enforcement, government, small businesses, consulting firms and corporations a robust way to authenticate, search and recover computer evidence rapidly and thoroughly.

When you're armed with EnCase® Forensic, you're armed with the industry-standard tool for uncovering, analyzing and presenting forensic data. This robust set of tools automates time-consuming tasks and allows simultaneous analysis of multiple pieces of acquired media. The efficiency and power of EnCase® Forensic can reduce your investigation time by up to 65 percent from our estimates.

Product Features

  • WIDEST FILE SYSTEM SUPPORT AVAILABLE: including Windows FAT12/16/32, NTFS, Macintosh HFS, HFS+, Sun Solaris UFS, Linux EXT2/3, Reiser, BSD FFS, Palm, TiVo Series One and Two, AIX JFS, JFS2, CDFS, Joliet, DVD, UDF and ISO 9660, VMware, Microsoft Virtual PC, ITFS and FFS.
  • BROADEST EMAIL SUPPORT AVAILABLE: including Outlook PSTs/OSTs ('97-'03), Outlook Express DBXs, Lotus Notes NFS, Yahoo, Hotmail, Netscape Mail, mbox, as well as AOL 6.0, 7.0, 8.0 and 9.0 Personal File Cabinets (PFCs). Also, displays deleted emails, notes, contacts and calendar entries for PSTs, as well as copy/un-erase email messages to popular message formats for external reviews.
  • BROADEST BROWSER AND INTERNET HISTORY SUPPORT AVAILABLE: decodes Web-browsing history and reveals cached HTML pages and associated images. It supports the most popular Web browsers, including Internet Explorer, Mozilla Firefox, Opera and Apple Safari (Mac OS X default).
  • DETAILED REPORTING AND ANALYSIS: define with detailed granularity what information is analyzed or collected and how it is presented. Almost all information revealed by EnCase® software can be exported into various file formats.
  • SMART EVIDENCE COLLECTION: no other forensic tool gives organizations the ability to forensically preserve only the relevant evidence without capturing the entire hard drive.
  • FORENSICALLY SOUND: court-validated EnCase® software is the industry-standard solution for acquisition, preservation and analysis of computer evidence.

    EnCase Training Schedule