The minimum requirements as described by the manufacturer are the following: four core processor CPU, 16GB Ram, USB and Ethernet connections. EnCase is usually my primary forensic tool but also serves as an excellent verification tool.As a forensic analysis tool, EnCase recommends a powerful workstation in order to perform quick and credible examination processes. My interaction with it has continued during many other training sessions of mine. My first meeting with it was at Guidance’s training center in Slough, UK in 2012. The current version of EnCase is V7.10 this tenth release reinforces the manufacturer’s great technical support. Guidance launched the current version (V7) in 2012, which brought a lot of changes to the software’s interface as well as many other well-known features in the software.

The most commonly used by examiners like myself is one of the industry standards, EnCase. The solution supports imaging in Windows, DOS and Linux, and has several options for compression, speed and error handling.After receiving a call to provide an evaluation on EnCase Forensic v7 Software, I started thinking of my case work on computer and mobile forensic analysis and the all tools that I have used over the years. 'EnCase® Forensic also provides the ability to image media using multiple operating systems, allowing flexibility and time savings when dealing with difficult acquisitions. The Unicode-supported index is built from the contents of personal documents, deleted files, file system artifacts, file slack, swap files, unallocated space, emails and web pages.' The indices can be chained together to find possible keywords common in other investigations. 'EnCase® Forensic builds a complete index of English and foreign language words with a new patentpending technology that permits fast and easy query for keywords by non-computer forensic investigators.

Once image files are created, examiners can search and analyze multiple drives or other media simultaneously, using keyword searches, hash analysis, file signature analysis, file-specific filters and multiple filters. Examiners can preview data while drives or other media are being acquired. 'EnCase® Forensic software offers advanced, time-saving features to let your investigators be more productive.

Encase forensics software