Overview Watch Introduction to Remote Computer Forensics EnCase® Enterprise is the gold standard remote computer forensic solution that greatly reduces the time and costs associated with internal digital investigations, while preserving findings to judicial standards. EnCase® Enterprise enables complete endpoint visibility and allows for thorough search, collection, preservation and analysis of information on laptops, desktops and servers across the network, without disrupting operations. EnCase® Enterprise provides a proven, cost-effective method to investigate HR related matters (such as corporate policy violations, harassment complaints or computer misuse allegations), IP theft, fraud, computer security incidents and more. Unlike performing a manual investigation of digital evidence, or offline tools, remote forensics with EnCase Enterprise helps meet the demands and complexity of an increasing volume of digital investigations by reducing travel, reducing time per investigation and enabling live investigations of devices.
The EnCase® Enterprise Advantage: | • | The gold standard in remote computer forensics, EnCase Enterprise is trusted by more than 50% of the Fortune 100 and deployed to more than 10 million endpoints | | • | Complete visibility into ALL data stored on the endpoint enables rapid, accurate decision making and brings comprehensive resolution to digital investigations | | • | Certified by FIPS 140-2, Common Criteria EAL2 and DIACAP, EnCase Enterprise is trusted by the largest government agencies and corporations to securely facilitate internal remote digital investigations | | • | Backed by our investigative expert services that provide industry best practices, training and certifications (EnCE®) |
EnCase® Bit9 Analyzer customers: Effective July 1, 2011 the EnCase® Bit9 Analyzer will be sold directly by Bit9 under the product name Bit9 Analyzer. There is no change to the interoperability between Bit9 Analyzer and EnCase® branded products. Read this announcement for more information. Learn MoreWhy Should You Implement Remote Forensic Capabilities?
Bringing remote computer forensic capabilities in house is important and cost effective for organizations of any size. In fact, Johnie Sullivan, the ISO for UNLV went on record to say, “As an office of one, EnCase Enterprise provides a critical force multiplication factor that allows me to keep up with my heavy workload of forensic cases in addition to my normal duties as Information Security Officer.” According to Gartner, if your investigators are spending too much time and money traveling, if you hire outside employees to perform investigations purely for logistical reasons, if your organization has multiple locations, or if you need to conduct surveillance of employee activities over a period of time, remote computer forensics should be considered. With this in mind, hundreds of organizations have found that enabling remote investigations in their enterprise saves time, reduces overall investigation costs, and provides unmatched visibility unattainable with any other solution.
Read nine case studies that demonstrate how our customers are using EnCase® Enterprise to conduct critical investigations while saving time and money.
Benefits & FeaturesCost Savings With EnCase Enterprise, organizations with more than one location can realize a return on investment after only a handful of investigations | • | Zero travel costs for investigators and no operational disruption to employees | | • | Eliminate expensive consulting fees associated with outsourcing investigations | | • | Reduce the risk of significant fines and penalties with ability to perform investigations to meet regulations such as Sarbanes-Oxley |
Remote, Forensic-level Visibility EnCase® Enterprise allows organizations to start gaining control over their endpoints to expose and understand at the deepest level what is going on at any moment in time. | • | Access to live devices provides invaluable information only found in RAM and the ability to see what is happening on a target device at a given moment in time | | • | Kernel level endpoint service provides visibility into data the operating system doesn’t know about such as hidden files, deleted files as well as information stored in slack or unallocated space | | • | Capabilities extend into email servers and archives, absolutely essential when investigating HR and Fraud matters |
Productivity enhancements EnCase Enterprise provides a centralized management console to initiate any number of concurrent investigations with a template driven workflow designed to assist investigators find exactly what they are looking for | • | Data processing engine optimized for forensic tasks, allows for increased efficiency searching for items of interest by automatically finding related items | | • | User-configurable templates can be tailored to common investigation types | | • | Automation of common processes, allows senior and junior resources to be allocated more efficiently |
Broadest OS Support Simultaneously investigate individual or multiple machines running on Windows, UNIX, Linux, Solaris, Mac OS X, even NetWare, for sensitive information, unauthorized processes, and network connections. Lightweight, passive endpoint service Weighing in at a mere 720k, the EnCase ® Enterprise service does not interfere with system operation or monopolize resources unlike traditional endpoint agent and allows for the capture and analysis of RAM as well as data on the hard drive. Patented Optimized Distributed Search The EnCase Enterprise search method does not require data be indexed before it can be searched. Optimized Distributed Search technology ensures only the files that need to be searched are searched through metadata analysis. Granular Roles and Permissions EnCase Enterprise has a number of controls enabling organizations to use the technology without compromising employee rights, exposing privileged information, or letting investigators arbitrarily perform unauthorized computer investigations. Detailed Reporting and Analysis Customizable reports can be tailored to present only the relevant information to senior decision makers. Audit log provides detailed reports on exactly what was done during the course of an investigation. Professional ServicesProfessional Services Guidance Software Professional Services empowers customers with direct access to technical expertise with a personalized experience that maximizes your return on investment and accelerates your time to value. With Professional Services from Guidance, your staff gains a trusted advisor to meet your goals in all areas of digital investigation. Guidance Advisory Program Services Implementation Services ensure you get up and running smoothly. We leverage a carefully constructed methodology that takes into account your network environment, performance requirements, and digital investigation strategies to deliver seamless solution implementation.
Learn More >> Implementation Services The same high-quality instruction available at your site. We provide all necessary equipment and materials.
Learn More >> Casework Services Casework Services provides immediate assistance to help with internal investigations, e-discovery collections and processing, network security events and remediation of unwanted electronic data.
Learn More >> Technical & Integration Assistance Services Technical & Integration Assistance Services helps you maintain your EnCase® Cybersecurity with integration, upgrades and tuning. We focus on optimizing the performance of your system with tailored requirements to meetyour specific needs.
Learn More >>
TrainingGuidance Software Training Guidance Software Training courses and programs help organizations maximize their use of EnCase® Enterprise software. We offer world-class training in enterprise investigations, e-discovery, computer security incident response, and digital forensics. Learn More About Training >> OnDemand Online Training Online training offers the same level of course training currently available at Guidance Software training facilities whenever you want, wherever you want. Learn More >> Mobile Training The same high-quality instruction available at your site. We provide all necessary equipment and materials. Learn More >> Annual Training Passport Continuous and flexible, Passport offers discounted, flat rate training for up to two years of unlimited training for your staff. Learn More >> EnCase® Enterprise Training Programs
EnCase® Enterprise Quick Start Covers the installation and configuration of EnCase® Enterprise. This includes installation and security key creation for the EnCase® SAFE (Secure Authentication for EnCase®) and configuration of users roles and networks within EnCase® Enterprise. OnDemand Online Training >>EnCase® Computer Forensics I Practical exercises and real-life simulations provides participants with an understanding of proper handling of digital evidence from seizure to acquisition, to the analysis and archiving of the data. Learn More >> OnDemand Online Training >>EnCase® Computer Forensics II EnCase® Enterprise Examinations Focuses on the use of EnCase Enterprise to conduct investigations in a network environment, administration, internal investigations, electronic discovery, audits, and intrusion detection. Learn More >> OnDemand Online Training >>
More SolutionsProducts and Solutions that Work with EnCase® Enterprise You can extend the functionality and reach of EnCase® Enterprise with these additional hardware and software solutions. Simplified field collection of forensic data can be done by almost anyone. Learn More >>
Broad range of forensic solutions to investigate, collect, and archive data. Learn More >>
|