Overview
Give your security specialists, investigators, computer incident-response teams, and litigation specialists everything they need to immediately and thoroughly search, collect, preserve, and analyze data from servers and workstations anywhere on your corporate network—without disrupting operations. Be confident in your findings using EnCase® Enterprise, the trusted and industry-leading digital forensics solution used by more than 60% of the Fortune 100 and by numerous government agencies.
7 Reasons to Adopt Version 7 With powerful automation capabilities, streamlined user interface, and optimized case management, EnCase Enterprise v7 is the most powerful and easiest-to-use version yet. Learn More About EnCase Enterprise v7  Tablet and
Smartphone
Acquisition
| Customizable Reports
| Simple E-Mail Review
| Improved Workflow
| New Evidence Processor
| Enhanced Snapshot
| The Value Inside
|
Market Leaders and Government Agencies Trust EnCase Enterprise:  | | Reduce costs and improve efficiencies with a centralized digital investigation capability
|  | | Increase confidence in findings by using the #1 solution for remote investigations
|  | | Achieve compliance with regulatory investigation requirements
|  | | Uncover potential evidence faster than ever using advance searching capabilities
|  | | Improve efficiency by automating common investigation tasks
|  | | Preserve evidence integrity with the court vetted EnCase® evidence file format
|  | | Enable the foundation for digital investigation, incident response, and electronic data discovery
|
 Dependable Results Investigators can be confident in their findings when using the proven, trusted, industry-leading forensic solution.  Powerful Search Uncover critical evidence using advanced search capabilities to identify data that would be irretrievable with other computer forensic applications.  Automation Improved efficiency by automating investigative tasks with EnScript®; the scripting extension built-into EnCase Enterprise.  Court Vetted EnCase Enterprise preserves data in an evidence file format (LEF or E01) with an unsurpassed record of court acceptance. FeaturesThe powerful and effective features of EnCase® Enterprise have made it the trusted standard for digital investigations. No other product offers the same degree of functionality, acceptance, and performance. | Acquire from Almost Anywhere Acquire data from disk or RAM, documents, images, e-mail, webmail, Internet artifacts,
Web history and cache, HTML page reconstruction, chat sessions, compressed files,
backup files, encrypted files, RAIDs, workstations, servers, and with Version 7:
smartphones and tablets. Complete Endpoint Visibility View hundreds of file formats in native form, built-in Registry viewer, process and
system information viewer, integrated photo viewer, see results on a timeline/calendar. Forensically Sound Acquisition EnCase Enterprise produces an exact binary duplicate of the digital evidence, then
verifies it by generating MD5 hash values for related image files and assigning CRC
values to the data. These checks and balances reveal when evidence has been
tampered with or altered, helping to keep all digital evidence forensically sound for use
in court proceedings or internal investigations. Advanced Analysis Recover files and partitions, detect deleted files and password protected files, perform
file signature analysis, and hash analysis, even within compounded files or unallocated
disk space. Improved Productivity Examiners can preview results while data is being acquired. Once the image files are
created, examiners can search and analyze multiple drives or media simultaneously.
Enhanced caching capabilities have been designed to give you instant access to case
data even if the machine is offline. Automated de-NISTing Capabilities The National Software Reference Library (NSRL) is provided in the EnCase hash library
format, allowing user to easily de-NIST their evidence, eliminating thousands of known
files from their evidence set. This reduces the time and amount of data that needs to be
analyzed significantly. Customizable and Extensible with EnScript EnCase Enterprise features extensibility via EnScript® programming capabilities.
EnScript® allows users to create custom scripts to help them automate time-consuming
investigative tasks, such as searching and analyzing specific document types or other
labor-intensive processes and procedures. This power can be harnessed by you to
greatly improve efficiencies around tasks unique to your organization. Automatic Reports Export reports with lists of relevant system information, files, and folders along with
detailed list of URLs, with dates and time of visits. Provide hard drive information and
details related to the acquisition, drive geometry, folder structure, etc. Actionable Data Once investigators have identified relevant evidence, they can create a comprehensive
report for presentation in court, to management or stakeholders in the outcome of the
investigation. |
New in Version 7Seven Reasons to Adopt EnCase® Enterprise v7 Everything You Know – Only Better Simply stated, this is the most powerful and the
easiest-to-use version of EnCase Enterprise ever
developed. Version 7: A New Approach With powerful automation capabilities, streamlined
user interface, and optimized case management,
EnCase Enterprise 7 transforms how you perform
investigations.  1. Integrated Smartphone & Tablet Acquisition You can now acquire data from smartphone and tablets directly from
EnCase Enterprise. Results are seamlessly integrated into cases. Directly
supports most popular smartphone and tablets.  2. Customizable Reports In version 7 you can create custom report templates, producing consistent,
professional reports for every case. With an easy to use configuration
capability you can create report templates for every type of case.  3. Simple E-Mail Review The greatly improved e-mail review in version 7 provides threading and
related conversations to make understanding the e-mail context much
easier.  4. New Workflow: Let EnCase® Do the Work In version 7, processing and indexing can be automated, giving you more
time to focus on investigating the evidence. As a result, you can decrease
your backlog, completing more investigations.  5. Reengineered Evidence Processor EnCase Enterprise v7 includes a reengineered evidence processor
featuring a new indexing engine with more powerful queries and faster
processing. In addition, you’ll be able to automate tasks, create templates
based on case profiles, and integrate EnScript® results.  6. Enhanced Snapshot Snapshot, the ability to capture and analyze RAM from target machines has
been improved to enable the user to view volatile data from numerous target
computers concurrently, making it easier to determine commonalities, or
expose anomalies, which can be important when investigating a computer
security incident.  7. The Value Inside EnCase Enterprise delivers the most advanced forensic software with the
broadest file type and OS support. With version 7 you also get the most
comprehensive encryption support, Passware integration for protected file
detection, and Windows Event Log compatibility. And just in case you need more reasons... Unified Search Our robust new query language uses an advanced
index engine to search across entire cases at once,
enabling fast evidence identification. Intuitive User Interface We've completely overhauled the user experience
and created a new, easy-to-use, tabbed interface
that might remind you more of a web browsing
experience. Supports Compliance Initiatives EnCase Enterprise v7 facilitates the investigative
requirements of several regulatory mandates
including Sarbanes-Oxley, HIPAA and GLBA. Powerful Automation Common processes, including custom EnScript
programs, can be automated, allowing you to
improve your efficiency. With Template-driven
processing results are consistent, providing output
that is easy to find and use. Optimized & Integrated EnScript Users with heavy case workloads appreciate the
efficiencies added by additional automation via
EnScript . We've added the ability to integrate
custom EnScript results in to the Evidence
Processor and vastly improved performance.
Windows 7 artifacts are now also supported. Promotional OfferJump-Start Your Remote Forensics for $9,995* EnCase® Enterprise provides a powerful platform for IT security professionals, investigators, and legal specialists to conduct digital investigations from a central location - without disrupting users or business operations. |
This limited-time offer is priced to allow any organization to take control and bring enterprise-class digital forensic capabilities in-house. You save on the software, installation and initial training but the savings in productivity, legal fees, and reduced risk exposure can be 10x or more.
For an all inclusive cost of $9,995USD, organizations looking to implement a digital investigation capability receive the software, 1st year maintenance, installation support call and on-line training. Everything you need to get up and running at a price more affordable than ever.
EnCase Enterprise is the trusted leader in digital forensics. There are more than 40,000 licensed users of EnCase® technology worldwide, including 65% of the Fortune 100. What’s included? Everything you need to jump-start a digital investigation capability. Software 1 Examiner License Centralized investigative user console where authorized users perform remote investigations on target devices on your network. 1 SAFE License (Secure Authentication for EnCase®) Used to manage access, log transactions, broker communications, and provide for secure transmission. 3 Concurrent Connections Simultaneously investigate up to three devices on your network with these secure virtual connections between Examiner and target machines. 1 Snapshot A secure virtual connection between the SAFE and target machine allowing for the capture of volatile data (RAM) for real-time visibility. | Maintenance One year of software maintenance ensures timely delivery of all updates to the software over the term. Installation Support Get up and running quickly with to up to four hours of installation support delivered via phone by an EnCase installation specialist. Training Once installed, orient yourself with EnCase Enterprise v7 through our EnCase Essentials course, and learn how to conduct digital investigations using EnCase Enterprise v7 via the included EnCase onDemand course, and EnCase Enterprise Start-up OnDemand. |
When You’re Ready to Grow: Components and Advanced Packages at 50% Off List | EnCase Enterprise Component Package Expand your Examiners and Connections for greater productivity. EnCase Enterprise Unlimited Components Unlimited use of the complete component suite of Examiners, Connections, SAFEs for unhindered scalability. |
* The $9,995USD promotional price is subject to change without notice and is only available to new customers in the U.S., U.K., and Canada. Offer valid only for a limited time and when purchased as part of an all-inclusive $9,995USD promotional package which includes software license, one (1) year of software maintenance support, installation support call (up to four hours), and an OnDemand training class for one (1) individual. Software license includes one (1) Examiner, one (1) SAFE, three (3) concurrent connections, and snapshot. Other restrictions may apply. Please call 1 (888) 999-9712 to confirm eligibility. TrainingGuidance Software Training Guidance Software Training courses and programs help organizations maximize their use of EnCase® Enterprise software. We offer world-class training in enterprise investigations, e-discovery, computer security incident response, and digital forensics. Learn More About Training >> OnDemand Online Training Online training offers the same level of course training currently available at Guidance Software training facilities whenever you want, wherever you want. Learn More >> Mobile Training The same high-quality instruction available at your site. We provide all necessary equipment and materials. Learn More >> Annual Training Passport Continuous and flexible, Passport offers discounted, flat rate training for up to two years of unlimited training for your staff. Learn More >> | EnCase Essentials: Training Included To help you quickly unlock the potential of EnCase® Enterprise, EnCase Essentials startup training is available on-demand and at no cost. Getting started couldn't be easier. Learn More... |
EnCase® Enterprise Training Programs
EnCase v7 Trasition *NEW* Designed for EnCase user who are upgrading from a previous version to v7, the EnCase v7 Transition course details the new features of v7, highlighting specifically the areas of the product that differ significantly from previous versions. To register for this course a user must have completed Computer Forensics II or be hold an EnCE Certification. Learn More >> EnCase Enterprise Quick Start Covers the installation and configuration of EnCase® Enterprise. This includes installation and security key creation for the EnCase® SAFE (Secure Authentication for EnCase®) and configuration of users roles and networks within EnCase® Enterprise. OnDemand Online Training >> EnCase Computer Forensics I Practical exercises and real-life simulations provides participants with an understanding of proper handling of digital evidence from seizure to acquisition, to the analysis and archiving of the data. Learn More >> OnDemand Online Training >> EnCase Computer Forensics II EnCase Enterprise Examinations Focuses on the use of EnCase Enterprise to conduct investigations in a network environment, administration, internal investigations, electronic discovery, audits, and intrusion detection. Learn More >> OnDemand Online Training >>
|