The existing EnCase® evidence file has performed well for over a decade. It is court-accepted, well-known, and adopted in the industry. Despite its effectiveness, some limitations remain that can only be overcome with an updated evidence file format.

This document outlines the technical details of the updated EnCase® evidence file format version 2 (Ex01) so that developers can customize their applications to integrate with the new format. It describes the details, data structures, and algorithms behind Ex01.