Home > Corporate Home > Internal Investigations

Internal Investigations with EnCase® Enterprise

Fraud that led to a loss of assets cost companies — on average — over US$ 1.7 million: a 50% increase over 2003. . . Over one third of these frauds were discovered by accident, making "chance" the most common fraud detection tool.
       — PriceWaterhouseCoopers, Global Economic Crime Survey 2005

EnCase® Enterprise is built upon the same forensic technology used by local and federal law enforcement agencies. It allows you to reach across the network from a central location to securely investigate multiple machines simultaneously, at the disk and memory levels. This gives you the power to detect fraud early and conduct the most penetrating investigation possible to effectively reduce your financial losses. Furthermore, EnCase® Enterprise enables you to restore your network's security, as well as locate and preserve the evidence you need to defend your assets — all without disrupting business or alerting suspects.

ONLY ENCASE® SOLUTIONS CAN DO ALL THIS. . .

• Reduce internal investigation costs up to 75% by our estimates.

• Securely audit individual or multiple machines over the LAN/WAN, at the disk and memory levels, for sensitive information, unauthorized processes and network connections — all without disrupting operations.

• Create logical evidence files — eliminating the need to capture entire hard drives — and preserve the associated metadata in individual files. 

• Investigate computers running on Windows, Linux, Solaris and Mac OS X and AIX.  

• Automated analysis — saves time by automating multiple time-consuming tasks.

• Preview computers over the network to determine whether relevant evidence exists:

• Unallocated/allocated space
• Deleted files
• File slack
• Volume slack
• File system attributes
• CD ROMs/DVDs
• Mounted FireWire amd USB devices
• Mounted encrypted volumes
• Mounted thumb drives