POWER | PERFORMANCE | EFFICIENCY

Introducing Enhanced EnCase Indexing Engine

In this latest release, EnCase Forensic 8 ofers you an enhanced indexing engine that empowers you to conduct your investigations with powerful processing speeds, improved foreign language support, advanced keyword searching, and optimized performance.

The time it takes investigators to complete their investigations drastically decreases as the enhanced indexing engine processes critical data up to four times faster than previous versions of EnCase. With an advanced query syntax, support for over 25 diferent languages, and improved hardware utilization, investigators can simultaneously search and analyze key evidence to uncover their fndings.

WHAT’S NEW IN ENCASE FORENSIC 8.07

In addition to the new indexing engine introduced in 8.06, this release now delivers new customer-driven enhancements designed to take forensic investigations to the next level. Some of the exciting enhancements include new encryption support and Apple File System (APFS) support. Guidance recommends that all customers upgrade to this latest release in order to have the best overall product experience and receive the latest fixes.

macOS APFS Support

EnCase Forensic now supports APFS, the file system used in the Apple High Sierra operating system
(macOS 10.13).
The following APFS features are not yet supported in this release: snapshots, crash protection,
checkpoints, fast directory sizing, and encryption support.

Mobile Acquisitions

The moment you’ve been waiting for. EnCase Forensic 8 now features mobile acquisition capabilities, supporting ALL smartphone operating systems, and over 26,000+ device profiles. You can now logically or physically acquire data such as text messages, pictures,app data, deleted data and much more to gather the critical evidence you need for your case. In today’s world, you need a tool that can collect from any device, and EnCase Forensic is here to help

Investigation Workflows

With new investigation workflows, known as Pathways, built into Forensic 8 examiners of any skill, from experts to the most junior member of the team, can complete the most common tasks associated with a triage or comprehensive investigation. With a few clicks an examiner can take a case from adding and processing evidence through creating a report of their findings. The most important part of the investigation remains the examiners ability to uncover evidence using their expertise, however with Pathways, examiners can rest assured that navigating EnCase Forensic will not slow down their progress.

ADDITIONAL ENHANCEMENTS INCLUDE:

• Support for Symantec PGP Version 10.3
• Support for Dell Data Protection 8.17
• Support for Microsoft BitLocker XTS-AES
• Bookmark as Image

NEW Add-On Solution

EnCase Mobile Investigator

Being able to review, bookmark, parse, and report on mobile evidence is critical in an investigation to uncover findings. Sold separately, EnCase Mobile Investigator allows investigators to easily review EnCase Forensic 8 acquired evidence from all types of digital devices without having to process the evidence. When used with EnCase Forensic, you can save time and allow case agents, attorneys, or other third parties to easily review data.

The Usability You Wanted

EnCase Forensic 8 delivers the usability you have been asking for. Here are just a few of the many features we’ve added to make your job easier:

• Persistent blue-checks: In EnCase Forensic 8, you can now “blue-check” important files and those selections will persist no matter what screen you navigate.
• Entry-view refresh: In EnCase Forensic 8, you will no longer need to navigate away from the entry view after hash analysis, adding a new partition, or processing your evidence to see the results of the task. With one click of the refresh button, your view will simply refresh.
• Multi-colored sweeping bookmarks: One of the most beloved features of EnCase has returned. You can now highlight any string, create a bookmark, and then highlight a string within the bookmarked string using a different color. With this, you can now easily focus on a portion of a bookmarked string, easily identifying its importance to the case.
• “Fourth Pane” Condition/EnScript/Filter Management: This new window, known to many as the “Fourth Pane” has returned. Examiners can now organize, add/import, edit, and run items without navigating a drop-down menu or switching their view.
• Streamlined Decoding Workflow: Evidence is already difficult enough to find. So we’ve made it easier for you. You can now see decoded interpretations of your evidence when viewing it in text or hex format. This new feature will make finding evidence critical to you case quicker and easier.