Powerful Triage and Collection
EnCase® Portable is a powerful solution,
delivered on a USB device, that allows
forensic professionals and non-experts to
quickly and easily triage and collect vital data
in a forensically sound and court-proven
Allow forensic experts and
non-experts alike to quickly
review information stored on
a computer in the field, in
real time, without altering or
damaging the information.
Empower anyone to
become an extension of a
computer forensic, incident
response, or e-discovery
The powerful and effective features of EnCase® Portable have made it the trusted standard in corporate and criminal investigation. No other product offers the same degree of functionality, acceptance, and performance.
Increase Your Reach
Extend the reach of your investigation, e-discovery, incident response, or IT teams without sending experts into the field. Based on the situation, EnCase® Portable can be used in Easy Mode for non-experts, or Advanced Mode to create and edit configurations in the field.
Forensically Sound Triage and Collection
Triage and collect while preserving metadata and maintaining evidence integrity. Collected data is preserved in the court-vetted EnCase® evidence file format; the most trusted format in the forensic community.
Fast, Powerful Triage
Instantly and easily view images, documents, and other digital evidence found on a target computer.
Customizable Collection Configuration
Use keywords, metadata, hash values, and other criteria to perform targeted collection, as well as full-disk imaging and memory acquisition.
Dual Triage and Collection Modes
Live mode – collect memory from running computers
Boot mode – collect from computers that are turned off
EnCase® Portable Saves You Time and Money:
|▪||Scan for evidence without having to call-in a specialist or seize computers|
|▪||Reduce backlog by allowing non-experts to perform forensically-sound triage and collection|
|▪||Pre-screened evidence reduces data, allowing forensic experts to work more efficiently|
|▪||Create pre-configured data collection jobs for non-experts - return to experts for analysis|
|▪||Plug-in device performs forensically-sound collection from any computer with a USB port|
Who Uses EnCase® Portable?
Get a handle on backlogs by enabling field personnel to complete forensic triage and collections in the field while forensic experts focus on completing investigations.
Take control of on-site investigations with immediate access to information on a suspect computer without needing to be a computer forensic specialist.
Corporations and Other Organizations
Optimize remote collection by eliminating the need to have computers shipped, decreasing downtime and increasing the efficiency of investigative teams.
Law Firms and Forensic Service Providers
Improve consistency and defensibility of collections by ensuring the same search methodology is applied to all custodians - eliminating the risks associated with disparate search methods, motives, or thoroughness.
Real-World Triage and Collection with
How can your organization meet the skyrocketing demands of identifying and acquiring digital media in the field? Examiners need to be in the lab, but are often called to the field to conduct previews and acquisitions. Learn how tools like EnCase® Portable put the power of triage and collection in the hands of anyone.
EnCase® Portable allows you to extend the reach and efficiency of your team by providing an easy-to-use triage and collection solution. Even non-experts can perform forensically sound collection of digital evidence from the field, allowing your forensic experts to stay in the lab.
EnCase® Portable is the fastest and easiest way to extend your forensic team; allowing you to deliver results quicker, and overcome your backlog. And now we’ve made it more affordable to get started.
New Pricing for EnCase® Portable
The decision has never been easier: EnCase® Portable is unsurpassed power and value.
EnCase® Portable Kit Includes:
|▪||4GB Pocket-Sized USB Device|
|▪||Quick Reference Guide|
|▪||EnCase® Portable Install DVD|
|▪||EnCase® Portable Boot CD|
EnCase Portable Kit
Annual SMS $60/each
Two or More
EnCase Portable Kits
Annual SMS $50/each
Price in US Dollars, international pricing may vary.
SMS required, not included in kit price.
To help you quickly unlock the potential of EnCase® Portable, EnCase Essentials startup training is available on-demand and at no cost. Getting started couldn't be easier.
Guidance Software Training
Guidance Software Training courses and programs help organizations maximize their use of EnCase® Forensic software. We offer world-class training in enterprise investigations,
e-discovery, computer security incident response, and digital forensics.
To help you quickly unlock the potential of EnCase® Portable, EnCase Essentials startup training is available on-demand and at no cost. Getting started couldn't be easier.Learn More...
EnCase® Portable Training
A hands-on class on how to search and collect for digital evidence using software and hardware tools, including EnCase® Portable and Tableau hardware bridges.
This three-day course provides the examiner with the skills needed to configure, deploy, and examine the results on the EnCase® Portable forensic collection kit. From preparation, to importing results, analysis, and reporting.
Digital Forensics Training
Practical exercises and real-life simulations provides participants with an understanding of proper handling of digital evidence from seizure to acquisition, to the analysis and archiving of the data.
Designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software.
In-Depth coverage of artifact analysis, data recovery, event log analysis, and advanced forensic methodology in Windows, Linux, and Macintosh OS environments. Also introduces EnScript programming for advanced task automation.
Hands-on course explores recovery and analysis of e-mail and Internet artifacts including file sharing apps, instant messaging apps, and web browsers. Students also examine Trojan viruses, key loggers, and more.
An expert-level course that focuses on the unique characteristics of Mac OS and Linux disk layout, disk-image analysis, volume structure, and recovery techniques.