Home /

EnCase® Enterprise v7

The most powerful and easiest-to-use remote investigation solution available.

Contact Me
For more information, speak
with a solution specialist:
1 (888) 999-9712
EnCase Enterprise V7 Test Drive  
 

Watch

See More Webinars and Demos...
 

Blog

 

Read

See More Whitepapers and Briefs...
 

More Info

EnCase Enterprise Training 
  • Overview

    Give your security specialists, investigators, computer incident-response teams, and litigation specialists everything they need to immediately and thoroughly search, collect, preserve, and analyze data from servers and workstations anywhere on your corporate network—without disrupting operations. Be confident in your findings using EnCase® Enterprise, the trusted and industry-leading digital forensics solution used by more than 60% of the Fortune 100 and by numerous government agencies.
    7 Reasons to Adopt Version 7
    With powerful automation capabilities, streamlined user interface, and optimized case management, EnCase Enterprise v7 is the most powerful and easiest-to-use version yet.
    Learn More About EnCase Enterprise v7
    EE-iconset
    Tablet and
    Smartphone
    Acquisition
    Customizable
    Reports
    Simple E-Mail
    Review
    Improved
    Workflow
    New Evidence
    Processor
    Enhanced
    Snapshot
    The Value
    Inside
    Market Leaders and Government Agencies Trust EnCase Enterprise:
    Bullet-imageReduce costs and improve efficiencies with a centralized digital investigation capability
    Bullet-imageIncrease confidence in findings by using the #1 solution for remote investigations
    Bullet-imageAchieve compliance with regulatory investigation requirements
    Bullet-imageUncover potential evidence faster than ever using advance searching capabilities
    Bullet-imageImprove efficiency by automating common investigation tasks
    Bullet-imagePreserve evidence integrity with the court vetted EnCase® evidence file format
    Bullet-imageEnable the foundation for digital investigation, incident response, and electronic data discovery
    Dependable-Icon
    Dependable Results
    Investigators can be confident in their findings when using the proven, trusted, industry-leading forensic solution.
    Powerful-Search-Icon
    Powerful Search
    Uncover critical evidence using advanced search capabilities to identify data that would be irretrievable with other computer forensic applications.
    Automation-Icon
    Automation
    Improved efficiency by automating investigative tasks with EnScript®; the scripting extension built-into EnCase Enterprise.
    Court-Vetted-Icon
    Court Vetted
    EnCase Enterprise preserves data in an evidence file format (LEF or E01) with an unsurpassed record of court acceptance.
  • Features

    The powerful and effective features of EnCase® Enterprise have made it the trusted standard for digital investigations. No other product offers the same degree of functionality, acceptance, and performance.
     
    EE-Overview-iconset 
    Acquire from Almost Anywhere
    Acquire data from disk or RAM, documents, images, e-mail, webmail, Internet artifacts, Web history and cache, HTML page reconstruction, chat sessions, compressed files, backup files, encrypted files, RAIDs, workstations, servers, and with Version 7: smartphones and tablets.
    Complete Endpoint Visibility
    View hundreds of file formats in native form, built-in Registry viewer, process and system information viewer, integrated photo viewer, see results on a timeline/calendar.
    Forensically Sound Acquisition
    EnCase Enterprise produces an exact binary duplicate of the digital evidence, then verifies it by generating MD5 hash values for related image files and assigning CRC values to the data. These checks and balances reveal when evidence has been tampered with or altered, helping to keep all digital evidence forensically sound for use in court proceedings or internal investigations.
    Advanced Analysis
    Recover files and partitions, detect deleted files and password protected files, perform file signature analysis, and hash analysis, even within compounded files or unallocated disk space.
    Improved Productivity
    Examiners can preview results while data is being acquired. Once the image files are created, examiners can search and analyze multiple drives or media simultaneously. Enhanced caching capabilities have been designed to give you instant access to case data even if the machine is offline.
    Automated de-NISTing Capabilities
    The National Software Reference Library (NSRL) is provided in the EnCase hash library format, allowing user to easily de-NIST their evidence, eliminating thousands of known files from their evidence set. This reduces the time and amount of data that needs to be analyzed significantly.
    Customizable and Extensible with EnScript
    EnCase Enterprise features extensibility via EnScript® programming capabilities. EnScript® allows users to create custom scripts to help them automate time-consuming investigative tasks, such as searching and analyzing specific document types or other labor-intensive processes and procedures. This power can be harnessed by you to greatly improve efficiencies around tasks unique to your organization.
    Automatic Reports
    Export reports with lists of relevant system information, files, and folders along with detailed list of URLs, with dates and time of visits. Provide hard drive information and details related to the acquisition, drive geometry, folder structure, etc.
    Actionable Data
    Once investigators have identified relevant evidence, they can create a comprehensive report for presentation in court, to management or stakeholders in the outcome of the investigation.
  • New in Version 7

    Seven Reasons to Adopt EnCase® Enterprise v7
    Everything You Know – Only Better
    Simply stated, this is the most powerful and the easiest-to-use version of EnCase Enterprise ever developed.
    Version 7: A New Approach
    With powerful automation capabilities, streamlined user interface, and optimized case management, EnCase Enterprise 7 transforms how you perform investigations.
    EE-Newv7_iconset
    Vid-thumb-Integrated-Smartphone-Tablet-Acquisition
    1. Integrated Smartphone & Tablet Acquisition
    You can now acquire data from smartphone and tablets directly from EnCase Enterprise. Results are seamlessly integrated into cases. Directly supports most popular smartphone and tablets.
    Vid-thumb-Customizable-Reports
    2. Customizable Reports
    In version 7 you can create custom report templates, producing consistent, professional reports for every case. With an easy to use configuration capability you can create report templates for every type of case.
    Vid-thumb-Simple-E-Mail-Review
    3. Simple E-Mail Review
    The greatly improved e-mail review in version 7 provides threading and related conversations to make understanding the e-mail context much easier.
    Vid-thumb-New-Workflow-Let-EnCase-do-the-Work
    4. New Workflow: Let EnCase® Do the Work
    In version 7, processing and indexing can be automated, giving you more time to focus on investigating the evidence. As a result, you can decrease your backlog, completing more investigations.
    Vid-thumb-Reengineered-Evidence-Processor
    5. Reengineered Evidence Processor
    EnCase Enterprise v7 includes a reengineered evidence processor featuring a new indexing engine with more powerful queries and faster processing. In addition, you’ll be able to automate tasks, create templates based on case profiles, and integrate EnScript® results.
    Vid-thumb-Enhanced-Snapshot
    6. Enhanced Snapshot
    Snapshot, the ability to capture and analyze RAM from target machines has been improved to enable the user to view volatile data from numerous target computers concurrently, making it easier to determine commonalities, or expose anomalies, which can be important when investigating a computer security incident.
    Vid-thumb-The-Value-Inside
    7. The Value Inside
    EnCase Enterprise delivers the most advanced forensic software with the broadest file type and OS support. With version 7 you also get the most comprehensive encryption support, Passware integration for protected file detection, and Windows Event Log compatibility.
    And just in case you need more reasons...
    Unified Search
    Our robust new query language uses an advanced index engine to search across entire cases at once, enabling fast evidence identification.
    Intuitive User Interface
    We've completely overhauled the user experience and created a new, easy-to-use, tabbed interface that might remind you more of a web browsing experience.
    Supports Compliance Initiatives
    EnCase Enterprise v7 facilitates the investigative requirements of several regulatory mandates including Sarbanes-Oxley, HIPAA and GLBA.
    Powerful Automation
    Common processes, including custom EnScript programs, can be automated, allowing you to improve your efficiency. With Template-driven processing results are consistent, providing output that is easy to find and use.
    Optimized & Integrated EnScript
    Users with heavy case workloads appreciate the efficiencies added by additional automation via EnScript . We've added the ability to integrate custom EnScript results in to the Evidence Processor and vastly improved performance. Windows 7 artifacts are now also supported.
  • Promotional Offer

    Jump-Start Your
    Remote Forensics
    for $9,995*
    EnCase® Enterprise provides a powerful platform
    for IT security professionals, investigators, and legal
    specialists to conduct digital investigations from a
    central location - without disrupting users or
    business operations.
    This limited-time offer is priced to allow any organization to take control and bring enterprise-class digital forensic capabilities in-house. You save on the software, installation and initial training but the savings in productivity, legal fees, and reduced risk exposure can be 10x or more.

    For an all inclusive cost of $9,995USD, organizations looking to implement a digital investigation capability receive the software, 1st year maintenance, installation support call and on-line training. Everything you need to get up and running at a price more affordable than ever.

    EnCase Enterprise is the trusted leader in digital forensics. There are more than 40,000 licensed users of EnCase® technology worldwide, including 65% of the Fortune 100.  
     
    What’s included?
    Everything you need to jump-start a digital investigation capability.
    Software
    1 Examiner License
    Centralized investigative user console where
    authorized users perform remote investigations on
    target devices on your network.
    1 SAFE License
    (Secure Authentication for EnCase®) Used to
    manage access, log transactions, broker
    communications, and provide for secure
    transmission.
    3 Concurrent Connections
    Simultaneously investigate up to three devices on
    your network with these secure virtual connections
    between Examiner and target machines.
    1 Snapshot
    A secure virtual connection between the SAFE
    and target machine allowing for the capture of
    volatile data (RAM) for real-time visibility.
    Maintenance
    One year of software maintenance ensures timely delivery of all updates to the software over the term.
    Installation Support
    Get up and running quickly with to up to four hours of installation support delivered via phone by an EnCase installation specialist.
    Training
    Once installed, orient yourself with EnCase Enterprise v7 through our EnCase Essentials course, and learn how to conduct digital investigations using EnCase Enterprise v7 via the included EnCase onDemand course, and EnCase Enterprise Start-up OnDemand.
     
    When You’re Ready to Grow: Components and Advanced Packages at 50% Off List
    EnCase Enterprise Component Package
    Expand your Examiners and Connections for
    greater productivity.
    EnCase Enterprise Unlimited Components
    Unlimited use of the complete component suite of
    Examiners, Connections, SAFEs for unhindered
    scalability.
     
    * The $9,995USD promotional price is subject to change without notice and is only available to new customers in the U.S., U.K., and Canada. Offer valid only for a limited time and when purchased as part of an all-inclusive $9,995USD promotional package which includes software license, one (1) year of software maintenance support, installation support call (up to four hours), and an OnDemand training class for one (1) individual. Software license includes one (1) Examiner, one (1) SAFE, three (3) concurrent connections, and snapshot. Other restrictions may apply. Please call 1 (888) 999-9712 to confirm eligibility.
  • Training

    Guidance Software Training
    Guidance Software Training courses and programs help organizations maximize their use of EnCase® Enterprise software. We offer world-class training in enterprise investigations, e-discovery, computer security incident response, and digital forensics.
    Learn More About Training >> 
    OnDemand Online Training
    Online training offers the same level of course training currently available at Guidance Software training facilities whenever you want, wherever you want.
    Learn More >> 
    Mobile Training
    The same high-quality instruction available at your site.  We provide all necessary equipment and materials.
    Learn More >> 
    Annual Training Passport
    Continuous and flexible, Passport offers discounted, flat rate training for up to two years of unlimited training for your staff.
    Learn More >> 
     
    EnCase-Essentials-Portable-Training  
    EnCase Essentials:
    Training Included
    To help you quickly unlock the potential of EnCase® Enterprise, EnCase Essentials startup training is available on-demand and at no cost. Getting started couldn't be easier.

    Learn More... 
     
    EnCase® Enterprise Training Programs

    EnCase v7 Trasition *NEW*
    Designed for EnCase user who are upgrading from a previous version to v7, the EnCase v7 Transition course details the new features of v7, highlighting specifically the areas of the product that differ significantly from previous versions. To register for this course a user must have completed Computer Forensics II or be hold an EnCE Certification.
    Learn More >> 
    EnCase Enterprise Quick Start
    Covers the installation and configuration of EnCase® Enterprise. This includes installation and security key creation for the EnCase® SAFE (Secure Authentication for EnCase®) and configuration of users roles and networks within EnCase® Enterprise.
    OnDemand Online Training >> 
    EnCase Computer Forensics I
    Practical exercises and real-life simulations provides participants with an understanding of proper handling of digital evidence from seizure to acquisition, to the analysis and archiving of the data.
    Learn More >>      OnDemand Online Training >> 
    EnCase Computer Forensics II
    Designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software.
    Learn More >>      OnDemand Online Training >> 
    EnCase Enterprise Examinations
    Focuses on the use of EnCase Enterprise to conduct investigations in a network environment, administration, internal investigations, electronic discovery, audits, and intrusion detection.
    Learn More >>      OnDemand Online Training >>