EnCase® Forensic

Our Track Record: The first of its kind. Court-validated

Guidance created the digital investigation software category with EnCase Forensic in 1998. EnCase has maintained its reputation as the benchmark standard in criminal investigations and SC Magazine named it the Best Forensic Analysis Solution for six consecutive years. No other solution offers the same level of functionality, flexibility, and has the track record of court acceptance as EnCase Forensic.

One product. One mission: To help you close cases.
Unlike other forensic solutions that only offer you surface-level visibility, EnCase Forensic allows anyone:

• Acquire data from the widest variety of devices, including more than 25 types of mobile devices such as smartphones, tablets, and GPS
• Conduct a thorough disk-level investigation
• Produce comprehensive reports on your findings while maintaining the integrity of the evidence.

EnCase Forensic throughout the cycle of your investigation

From the moment a case is opened until it goes to the district attorney, your work will be well done thanks to: IMAGE

SORT

In the field and in the lab

EnCase Forensic lets you quickly search, identify, and prioritize possible evidence in order to determine whether it is justified to continue the investigation. The result will be a reduction in backlog, so that investigators can focus on closing the case.

COLLECT

Keep your evidence safe. Protect your case.

EnCase Forensic helps you obtain more evidence than any other product on the market. With EnCase Forensic, you can collect data from a wide variety of operating systems and file systems, including mobile devices. This is the flexibility needed to ensure that you can follow cases to the end no matter where the potential evidence is located.

DECRYPT

Unlock encrypted evidence

EnCase Forensic's decryption capabilities are unmatched; this forensic solution offers the widest encryption compatibility. Encryption compatibility includes products such as Dell data protection, Symantec, McAfee, and many more. You can extend EnCase Forensic's decryption capability with Tableau Password Recovery, a cost-effective hardware developed specifically to identify and unlock password-protected files.

PROCESS

Automate routine processes; focus on the investigation

The EnCase Forensic evidence processor offers industry-leading processing capability that can automate evidence preparation, making it easier to finalize the investigation. Using an indexing engine developed for scalability and performance, you can automate complex queries across your varied evidence sources in a single step, saving time and increasing efficiency.

INVESTIGATE

Put your expertise front and center

The most important part of any investigation is your ability to analyze the evidence. EnCase Forensic was designed with the investigator in mind and offers a wide range of capabilities that allow you to perform deep forensic analysis and quick triage analysis from the same solution. It was created to help you do what you do best: find evidence and close cases.

REPORT

Customize reports for your audience

EnCase Forensic provides a flexible reporting framework that lets you tailor your case reports based on your specific needs. With the integration of comprehensive sorting and reporting options, you can create reports for a wide variety of audiences and easily share them throughout the organization.