JUST RELEASED:

EnCase Forensic 20.2: Collect from Macs equipped with Apple T2 Security. Also, connect to the Cloud and user credentials to forensically collect data from cloud repositories.

Use the agent to preview and acquire machines equipped with Apple T2 Security chips – without additional hardware, drive partitions, or hassle. And if the user is logged in. no credentials are required. Also, examiners can leverage credentials to collect from data repositories in the cloud, including Microsoft O365, Sharepoint, OneDrive, and Google Drive.

The Gold Standard in Digital Investigation

thumbnail-mobile-forensics

Our Heritage: Best in Class. Proven in Courts.
Guidance created the category for digital investigation software with EnCase Forensic in 1998. EnCase has maintained its reputation as the gold standard in criminal investigations and was named the Best Computer Forensic Solution for eight consecutive years by SC Magazine. No other solution offers the same level of functionality, flexibility, and has the track record of court-acceptance as EnCase Forensic. With EnCase offering mobile forensics, investigators have the flexibility and convenience they need to complete their investigations quickly and efficiently.

One Product. One Mission: Get You to Case Closed.
Unlike other forensic solutions that only provide surface level visibility, EnCase Forensic offers the flexibility for any investigator to:

  • Acquire data from the widest variety of devices, including over 25 types of mobile devices such as smartphones, tablets, and GPS
  • Complete a comprehensive, forensically sound investigation
  • Produce extensive reports on findings while maintaining the evidence integrity

 

Watch Product Overview
scawards2020_winner140613f8beb06108b3ffff0100c79052

Recipient of SC Magazine “Best Computer Forensic Solution” award for 2020. The 10th year in a row winning this award.



EnCase Forensic Across Your Investigation Lifecycle

From the moment a case is opened to the moment you hand it over to the district attorney, you'll get your work done right, through:

Triage
Triage
Collect
Collect
Decrypt
Decrypt
Process
Process
Investigate
Investigate
Report
Report

Triage

In the Field and in the Lab

EnCase Forensic enables you to quickly search, identify, and prioritize potential evidence, in computers and mobile devices, to determine whether further investigation is warranted. This will result in a decreased backlog so that investigators can focus on getting to case closed.

Collect

Secure Your Evidence. Protect Your Case.

EnCase Forensic helps you acquire more evidence than any product on the market. You can collect from a wide variety of operating and file systems, including over 25 types of mobile devices with EnCase Forensic. Parse the most popular mobile apps across iOS, Android, and Blackberry devices so that no evidence is hidden. This is the flexibility needed to ensure you can complete your cases no matter where the potential evidence resides.

Decrypt

Unlock Encrypted Evidence

EnCase Forensic is unmatched in its decryption capabilities, offering the broadest support of any forensic solution. Encryption support includes products such as Dell Data Protection, Symantec, McAfee, and many more. You can further expand the decryption power of EnCase Forensic with Tableau Password Recovery — a purpose-built, cost-effective hardware solution to identify and unlock password-protected files.

Process

Automate the Routine, Focus on the Investigation

The EnCase Forensic evidence processor provides industry-leading processing capabilities that can automate the preparation of evidence, making it easier to complete the investigation. Powered by an indexing engine built for scale and performance, you can automate complex queries across your varied evidence sources in one step saving time and increasing your efficiency.

Investigate

Bring Your Expertise to the Forefront

The most important part of any investigation is your ability to analyze your evidence. EnCase Forensic is built with the investigator in mind, providing a wide range of capabilities that enables you to perform deep forensic analysis as well as fast triage analysis from the same solution. Built to help you do what you do best: find evidence and close cases.

Report

Tailor Your Reports for Your Audience

EnCase Forensic provides a flexible reporting framework that empowers you to tailor case reports to meet your specific needs. With comprehensive and triage reporting options built in, you can create reports for a wide range of audiences and easily share them across your organization.
Previous Next
“It is a very powerful tool that has the ability to solve a case in just a few clicks or it enables flexibility and increased interrogation of the data through the EnScript functionality. I use it all the time and they both save time and present the evidence brilliantly.”

Barrie Sinfield, Digital Forensic Unit, Cambridgeshire Constabluary
“I am already speaking all over about how Guidance has turned the page to really pay attention to LE and Child Exploitation to save victims globally.”

(Ret) Capt. Richard W Brown, New Jersey State Police, Project VIC Manager
“Overall, EnCase Forensic 8 is the best version yet.”

Allen LaFontaine, Southern Alberta Internet Child Exploitation Unit

NOW INTRODUCING:

OpenText Media Analyzer

OpenText Media Analyzer provides investigators with AI computer vision technology that identifies case relevant pictures matching 12 pre-defined categories including Pornography and Extremism. Media Analyzer reduces the amount of content investigators need to manually review, significantly decreasing the time to discover critical evidence.

Learn More

PURCHASING OPTIONS

Site Licenses
The EnCase Forensic Site License allows you to grow as your forensic needs evolve. With an upfront commitment of no less than 3 licenses, a site license provides access to additional copies of EnCase Forensic at a pre-negotiated discounted rate, allowing you to better predict the cost of increasing your staff and your budgets year-over-year. 

Request Quote
Perpetual License
Ensure your federal, state, or local law enforcement agency has the software needed for any investigation by paying a one-time licensing fee and a small yearly maintenance fee for access to software updates, tech support, and the forensic community portal.

Request Quote
Term Based Licensing
Extend the capabilities of your consulting services with a term-based license paid yearly. The term option is great for any consulting organization that wants to minimize the upfront costs of getting up and running on EnCase Forensic.

Request Quote
Academic Program
Designed to assist professors and student, the EnCase Academic Program allows universities and colleges to bring EnCase into the classroom. With the Academic Program students get hands-on experience with the leading forensic solution, increasing their marketability when they graduate.

Learn More
John Grim
Senior Consultant
Verizon RISK
Jacob "Jake" Williams
Forensics Analyst
Rendition Infosec
Jason Bailey
Director, Product Management
Guidance Software
Lee Whitfield
Director of Forensics
Digital Discovery
Darren Windham
Sr Security Consultant
Verizon
William Perry
Chief Information Security Officer
Cal State University
Davitt Potter
Technical Director
Arrow Electronics
Daniel Smyth
Instructor II
Guidance Software
Lance Mueller
Incident Response & Forensics
Absolute
Vincent LeToux
Incident Detection, Prevention & Response Manager
Engie
Joseph Greenfield
Associate Professor of Information Technology Practice
University of Southern California
Jerald Garner
National Field Supervisor
NCUA
David Ellis
VP of Investigations
SecurityMetrics
Robert DeCicco
Managing Director
Berkeley Research Group
Neil Davis
Senior Solutions Consultant
Guidance Software
Jared Cosiglia
President
TRU Staffing Partners
Idan Levin
CTO & Co-Founder
Hexadite
Matt McCartney
Forensic Technology and Discovery Services
Ernst & Young
Elvis Moreland
Head Cyber Security and Risk Management Consulting
Atos
Joshua Moulin
Chief Information Officer
US DOE/NNSA Nevada National Security Site

Let's Get Started

Let us answer your questions or provide you a quote.