Give your security specialists, investigators, computer incident-response teams, and litigation specialists everything they need to immediately and thoroughly search, collect, preserve, and analyze data from servers and workstations anywhere on your corporate network—without disrupting operations. Be confident in your findings using EnCase® Enterprise, the trusted and industry-leading digital forensics solution used by more than 60% of the Fortune 100 and by numerous government agencies.
7 Reasons to Adopt Version 7
With powerful automation capabilities, streamlined user interface, and optimized case management, EnCase Enterprise v7 is the most powerful and easiest-to-use version yet.
Learn More About EnCase Enterprise v7
Market Leaders and Government Agencies Trust EnCase Enterprise:
|Reduce costs and improve efficiencies with a centralized digital investigation capability
|Increase confidence in findings by using the #1 solution for remote investigations
|Achieve compliance with regulatory investigation requirements
|Uncover potential evidence faster than ever using advance searching capabilities
|Improve efficiency by automating common investigation tasks
|Preserve evidence integrity with the court vetted EnCase® evidence file format
|Enable the foundation for digital investigation, incident response, and electronic data discovery
Investigators can be confident in their findings when using the proven, trusted, industry-leading forensic solution.
Uncover critical evidence using advanced search capabilities to identify data that would be irretrievable with other computer forensic applications.
Improved efficiency by automating investigative tasks with EnScript®; the scripting extension built-into EnCase Enterprise.
EnCase Enterprise preserves data in an evidence file format (LEF or E01) with an unsurpassed record of court acceptance.
The powerful and effective features of EnCase® Enterprise have made it the trusted standard for digital investigations. No other product offers the same degree of functionality, acceptance, and performance.
Acquire from Almost Anywhere
Acquire data from disk or RAM, documents, images, e-mail, webmail, Internet artifacts,
Web history and cache, HTML page reconstruction, chat sessions, compressed files,
backup files, encrypted files, RAIDs, workstations, servers, and with Version 7:
smartphones and tablets.
Complete Endpoint Visibility
View hundreds of file formats in native form, built-in Registry viewer, process and
system information viewer, integrated photo viewer, see results on a timeline/calendar.
Forensically Sound Acquisition
EnCase Enterprise produces an exact binary duplicate of the digital evidence, then
verifies it by generating MD5 hash values for related image files and assigning CRC
values to the data. These checks and balances reveal when evidence has been
tampered with or altered, helping to keep all digital evidence forensically sound for use
in court proceedings or internal investigations.
Recover files and partitions, detect deleted files and password protected files, perform
file signature analysis, and hash analysis, even within compounded files or unallocated
Examiners can preview results while data is being acquired. Once the image files are
created, examiners can search and analyze multiple drives or media simultaneously.
Enhanced caching capabilities have been designed to give you instant access to case
data even if the machine is offline.
Automated de-NISTing Capabilities
The National Software Reference Library (NSRL) is provided in the EnCase hash library
format, allowing user to easily de-NIST their evidence, eliminating thousands of known
files from their evidence set. This reduces the time and amount of data that needs to be
Customizable and Extensible with EnScript
EnCase Enterprise features extensibility via EnScript® programming capabilities.
EnScript® allows users to create custom scripts to help them automate time-consuming
investigative tasks, such as searching and analyzing specific document types or other
labor-intensive processes and procedures. This power can be harnessed by you to
greatly improve efficiencies around tasks unique to your organization.
Export reports with lists of relevant system information, files, and folders along with
detailed list of URLs, with dates and time of visits. Provide hard drive information and
details related to the acquisition, drive geometry, folder structure, etc.
Once investigators have identified relevant evidence, they can create a comprehensive
report for presentation in court, to management or stakeholders in the outcome of the
New in Version 7
Seven Reasons to Adopt EnCase® Enterprise v7
Everything You Know – Only Better
Simply stated, this is the most powerful and the
easiest-to-use version of EnCase Enterprise ever
Version 7: A New Approach
With powerful automation capabilities, streamlined
user interface, and optimized case management,
EnCase Enterprise 7 transforms how you perform
1. Integrated Smartphone & Tablet Acquisition
You can now acquire data from smartphone and tablets directly from
EnCase Enterprise. Results are seamlessly integrated into cases. Directly
supports most popular smartphone and tablets.
2. Customizable Reports
In version 7 you can create custom report templates, producing consistent,
professional reports for every case. With an easy to use configuration
capability you can create report templates for every type of case.
3. Simple E-Mail Review
The greatly improved e-mail review in version 7 provides threading and
related conversations to make understanding the e-mail context much
4. New Workflow: Let EnCase® Do the Work
In version 7, processing and indexing can be automated, giving you more
time to focus on investigating the evidence. As a result, you can decrease
your backlog, completing more investigations.
5. Reengineered Evidence Processor
EnCase Enterprise v7 includes a reengineered evidence processor
featuring a new indexing engine with more powerful queries and faster
processing. In addition, you’ll be able to automate tasks, create templates
based on case profiles, and integrate EnScript® results.
6. Enhanced Snapshot
Snapshot, the ability to capture and analyze RAM from target machines has
been improved to enable the user to view volatile data from numerous target
computers concurrently, making it easier to determine commonalities, or
expose anomalies, which can be important when investigating a computer
7. The Value Inside
EnCase Enterprise delivers the most advanced forensic software with the
broadest file type and OS support. With version 7 you also get the most
comprehensive encryption support, Passware integration for protected file
detection, and Windows Event Log compatibility.
And just in case you need more reasons...
Our robust new query language uses an advanced
index engine to search across entire cases at once,
enabling fast evidence identification.
Intuitive User Interface
We've completely overhauled the user experience
and created a new, easy-to-use, tabbed interface
that might remind you more of a web browsing
Supports Compliance Initiatives
EnCase Enterprise v7 facilitates the investigative
requirements of several regulatory mandates
including Sarbanes-Oxley, HIPAA and GLBA.
Common processes, including custom EnScript
programs, can be automated, allowing you to
improve your efficiency. With Template-driven
processing results are consistent, providing output
that is easy to find and use.
Optimized & Integrated EnScript
Users with heavy case workloads appreciate the
efficiencies added by additional automation via
EnScript . We've added the ability to integrate
custom EnScript results in to the Evidence
Processor and vastly improved performance.
Windows 7 artifacts are now also supported.
EnCase® Enterprise provides a powerful platform
for IT security professionals, investigators, and legal
specialists to conduct digital investigations from a
central location - without disrupting users or
This limited-time offer is priced to allow any organization to take control and bring enterprise-class digital forensic capabilities in-house. You save on the software, installation and initial training but the savings in productivity, legal fees, and reduced risk exposure can be 10x or more.
For an all inclusive cost of $9,995USD, organizations looking to implement a digital investigation capability receive the software, 1st year maintenance, installation support call and on-line training. Everything you need to get up and running at a price more affordable than ever.
EnCase Enterprise is the trusted leader in digital forensics. There are more than 40,000 licensed users of EnCase® technology worldwide, including 65% of the Fortune 100.
Everything you need to jump-start a digital investigation capability.
1 Examiner License
Centralized investigative user console where
authorized users perform remote investigations on
target devices on your network.
1 SAFE License
(Secure Authentication for EnCase®) Used to
manage access, log transactions, broker
communications, and provide for secure
3 Concurrent Connections
Simultaneously investigate up to three devices on
your network with these secure virtual connections
between Examiner and target machines.
A secure virtual connection between the SAFE
and target machine allowing for the capture of
volatile data (RAM) for real-time visibility.
One year of software maintenance ensures timely delivery of all updates to the software over the term.
Get up and running quickly with to up to four hours of installation support delivered via phone by an EnCase installation specialist.
Once installed, orient yourself with EnCase Enterprise v7 through our EnCase Essentials course, and learn how to conduct digital investigations using EnCase Enterprise v7 via the included EnCase onDemand course, and EnCase Enterprise Start-up OnDemand.
When You’re Ready to Grow: Components and Advanced Packages at 50% Off List
EnCase Enterprise Component Package
Expand your Examiners and Connections for
EnCase Enterprise Unlimited Components
Unlimited use of the complete component suite of
Examiners, Connections, SAFEs for unhindered
* The $9,995USD promotional price is subject to change without notice and is only available to new customers in the U.S., U.K., and Canada. Offer valid only for a limited time and when purchased as part of an all-inclusive $9,995USD promotional package which includes software license, one (1) year of software maintenance support, installation support call (up to four hours), and an OnDemand training class for one (1) individual. Software license includes one (1) Examiner, one (1) SAFE, three (3) concurrent connections, and snapshot. Other restrictions may apply. Please call 1 (888) 999-9712 to confirm eligibility.
Guidance Software Training
Guidance Software Training courses and programs help organizations maximize their use of EnCase® Enterprise software. We offer world-class training in enterprise investigations, e-discovery, computer security incident response, and digital forensics. Learn More About Training >>
OnDemand Online Training
Online training offers the same level of course training currently available at Guidance Software training facilities whenever you want, wherever you want. Learn More >>
The same high-quality instruction available at your site. We provide all necessary equipment and materials. Learn More >>
Annual Training Passport
Continuous and flexible, Passport offers discounted, flat rate training for up to two years of unlimited training for your staff. Learn More >>
To help you quickly unlock the potential of EnCase® Enterprise, EnCase Essentials startup training is available on-demand and at no cost. Getting started couldn't be easier.Learn More...
EnCase® Enterprise Training Programs
EnCase v7 Trasition *NEW*
Designed for EnCase user who are upgrading from a previous version to v7, the EnCase v7 Transition course details the new features of v7, highlighting specifically the areas of the product that differ significantly from previous versions. To register for this course a user must have completed Computer Forensics II or be hold an EnCE Certification.Learn More >>
EnCase Enterprise Quick Start
Covers the installation and configuration of EnCase® Enterprise. This includes installation and security key creation for the EnCase® SAFE (Secure Authentication for EnCase®) and configuration of users roles and networks within EnCase® Enterprise.OnDemand Online Training >>
EnCase Computer Forensics I
Practical exercises and real-life simulations provides participants with an understanding of proper handling of digital evidence from seizure to acquisition, to the analysis and archiving of the data.Learn More >> OnDemand Online Training >>
EnCase Computer Forensics II
EnCase Enterprise Examinations
Focuses on the use of EnCase Enterprise to conduct investigations in a network environment, administration, internal investigations, electronic discovery, audits, and intrusion detection.Learn More >> OnDemand Online Training >>