Investigation of fraud in virtual environments
Computer Forensics
Counter expert reports
Prevention and detection: corporate management of Electronic Evidence
Set up of forensic equipment
Hardware Forensics
Software Forensics
Forensic tools



The leading solution for digital investigation and forensic analysis of systems

Version 5 of EnCase offers a revolutionary integrated one-stop solution for the whole forensic process.

EnCase version 5 provides the most advanced tools for the forensic analysis of systems and digital investigation. With an intuitive and flexible graphic interface whose efficiency is matched by no other product on the market, EnCase v5 provides investigators all the necessary armoury to conduct large scale analysis in complex investigations with precision and confidence.

A prize-winning solution that completely guarantees the integrity of the processed information allowing analysts to manage, with ease, large volumes of digital evidence including deleted files, slack areas, paging and unassigned clusters .
  • Acquisition of forensic images using non-invasive techniques supported on multiple systems: Windows, MAC OS, Linux, Solaris, HP UX
  • Complete Unicode support
  • Capacity for simultaneous analysis of multiple systems
  • Advanced search tools
  • Support for RAID 0.1 & 5
  • Support for compressed NTFS file systems
  • Management of compound filters
  • Unique response time thanks to multiple sector caches and optimized searching algorithms

Some of the best new features of version 5:

•  Improvements in the analytical capacity
EnCase v5 offers an improvement in the analysis of e-mail communication, supporting a wider range of corporate tools such as Webmail. It also offers new features in the viewing of HTML internet pages, of Cache, as well as the most popular Internet browser features of the previous version.

•  Administration of "Digital Evidence"
Allows the creation of "Logical Evidence Files" that only contain selected files with MD5 authentication. Support for the creation and editing of "Logical Volumes" for better administration of the case.

•  Improvements in the visual interface and tools access of EnCase allows the use of multiple screens to show separate windows at the same time at the discretion of the analyst
Makes possible the conversion of keywords of a definite case in available means for management of future cases.
New features for organising the content of e-mail, web history and cache.
Integrated access of the support material tool of Guidance Software website.

•  Improved functionality of the user tools in comparison to the previous versions

A couple of web-links where you can find information regarding EnCase:

www.guidancesoftware.com
www.encase.com



A software platform allowing complete visibility across your network for internal Investigations, network security, eDiscovery and policy enforcement

Explosive growth in the volume of electronic data stores on your organization's network coupled with the risks associated with malicious network activity and improper handling of private information such as credit card data has created the need to conduct discreet digital investigations over the network.

The enormous costs, regulatory risks and business disruption associated with the traditional methods of forensic-level enterprise investigations, eDiscovery and incident response can handicap corporations of any size.

EnCase Enterprise gives you the power to search, collect, preserve and analyze the vast amounts of data associated with doing business today and generate detailed reports of those findings.

With EnCase technology:

  • Complete visibility across the network exposes operational risks and mitigates threats
  • Automated response to security alerts starts an investigation and stops potential data loss or corruption
  • Reduce costs and increase productivity by performing investigation and collection from a central location


Download the brochure of EnCase Enterprise (PDF format, approx. 2,7 MB)

Download the brochure of EnCase In Action (PDF format, approx. 194 KB)

Forensic Talon® is a capturing system with all the capabilities needed to meet today's digital forensic standards. It is equipped with advanced features and designed for compliance with tomorrow's emerging requirements.

The Forensic Talon® kit includes a ruggedized carrying case with adapters, tools and other necessary accessories.

Features:

•  Exact Suspect Drive Capture
•  Portable Unit and Kit
•  MD5 Authentication
•  SHA – 256 Authentication
•  DD Images
•  Data capturing and verification speed

Software:

•  On error prompt: Abort, Skip, Retry and Recover
•  Multiple overwriting wipe out: erases the destination drive prior to capture, or erases remainder of drive after capture

Connectivity:

•  IDE/UDMA: the fastest method of capture
•  Serial ATA: the system provides connectivity to serial ATA drives with capturing speeds approaching 4.0 GB/min
•  Write-protected USB capture
•  Capture through the PCMCIA Slot
•  Optional drive adapters to any interface in the market