Littlejohn Shinder, Michael Cross, in Scene of the Cybercrime (Second Edition), 2008 EnCaseĮnCase is developed by Guidance Software ( and has a friendly graphical interface that makes it easier for many forensic technicians to use. Given the complexities and importance of executing these searches correctly, you should rely on trained or certified individuals when using EnCase eDiscovery to ensure that your search has been properly constructed and can withstand scrutiny if challenged in court. Guidance offers certification for use of its software-the EnCase Certified Examiner (EnCE), which is a certification for the use of its computer forensic software (see for more information). Also, EnCase software utilizes Global Regular Expression and Print (GREP) commands to create search terms, and this is another area where Guidance Software's solutions will require training. Another key factor with EnCase software is that it requires specialized training to ensure that the queries are properly fashioned. As it does not build an index for searching, it can perform keyword, metadata, file type, and Boolean searches using and, or, and not.
EnCase eDiscovery does not build an index that it can reuse with each search, so the length of time a search requires will depend on a number of factors, including the complexity of the search, the number of keywords, the date ranges, and the file types being searched for.ĮnCase technology relies on legacy search methods. It is able to scan out, under the operating system, and conduct a targeted search and collection on any enterprise data source to which it can connect. As of this writing, Guidance has yet to release connectors to search an organization's ECM or archive solution, but it has discussed the development of connectors for solutions such as EMC Documentum and OpenText Livelink.ĮnCase eDiscovery is well known in the e-discovery space for its ability to reach out to the unstructured and unmanaged data on laptops and desktops.
Additionally, EnCase eDiscovery is able to perform full-disk images across the network if required. In the past several years, Guidance has moved into the enterprise and e-discovery search and identification space with EnCase eDiscovery.ĮnCase eDiscovery allows you to search across the enterprise and target laptops, desktops, file servers, and e-mail servers to conduct a targeted search and identification for potentially relevant data. It is a publicly traded company, and its EnCase forensic solution is the most widely used software for imaging hard drives and has been around for more than a decade.
Guidance Software is a pioneer in the forensic space. In E-discovery: Creating and Managing an Enterprisewide Program, 2009 Guidance Software EnCase eDiscovery
0 kommentar(er)
