EnCase® Physical Disk Emulator

• Mounts images of hard drives or CDs as read-only local drives.
• Enables the use of third party tools on forensic data exposed by EnCase®.
• When using VMware, PDE enables the examiner to boot and interact with the computer in the same state as it was when the evidence was captured.
• Provides a platform for juries to view digital evidence in a way that they may better understand.
• Reduces the number of drive restores, saving time and money needed to stock hard drives.
• PDE can mount a number of file systems not recognized by Windows Explorer, but still recognized and bootable by VMware. While Windows does not read the Linux and Free BSD formats, the following file system formats are still bootable with VMware: Windows (DOS, FAT 12/16/32, NTFS), Linux (SuSE, Red Hat and Mandrake), Free BSD and NetWare.