The Standard in Digital Investigation

The proven, powerful, and trusted EnCase® Forensic solution lets examiners acquire data from a wide variety of devices, unearth potential evidence with disk level forensic analysis, and craft comprehensive reports on their findings, all while maintaining the integrity of their evidence.

Acquire data from disk or RAM, documents, images, e-mail, webmail, Internet artifacts, Web history and cache, HTML page reconstruction, chat sessions, compressed files, backup files, encrypted files, RAIDs, workstations, servers, and smartphones and tablets.

EnCase Forensic

Forensically Sound Acquisition

Produces an exact binary duplicate of the original drive, verified by MD5 hash values and CRC checks to ensure evidence integrity for court.

Advanced Analysis

Recover files and partitions, detect deleted files via event logs, and perform file signature and hash analysis even in unallocated space.

Improved Productivity

Preview results during acquisition. Search and analyze multiple drives simultaneously with enhanced caching for offline access.

Automated de-NISTing

Includes NSRL hash library to automatically eliminate thousands of known harmless files, significantly reducing analysis time.

Multiple File Viewers

View hundreds of file formats in native form, with built-in Registry viewer, integrated photo viewer, and timeline analysis.

EnScript Customization

Use EnScript® programming to automate time-consuming tasks and create custom programs for specific investigative needs.

Automatic Reports

Export comprehensive reports listing files, folders, URLs, and visit times, along with detailed drive geometry and acquisition info.

Actionable Data

Create reports ready for court presentation or management review once relevant evidence has been identified.

Passware Integration

Integrates with Passware Kit Forensic to automate the detection and decryption of encrypted files within the Evidence Processor.

Start Your Investigation Today

Equip your team with the industry-standard solution for forensically sound data collection and analysis.

Contact Sales