July 11, 2006
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Easy to use, its intuitive interface makes acquiring, analysing and viewing evidence simple and reliable; long and honourable track record in the courts.
- Weaknesses: Expensive! Competent, but not significantly superior to its competitors.
- Verdict: Still on top, but the gap is narrowing.
This new version of EnCase shows its pedigree as the oldest of the GUI-based IT forensic tools. We found it very simple to operate and use.
The interface is much like other IT forensic tools, but slightly more intuitive and comfortable to use. Moving around is quick and easy and all evidence data is organised by case and is simple to access.
EnCase Forensic is first and foremost a computer forensic tool, but it includes other useful features such as the ability both to preview and acquire disks through many types of connections, such as direct network crossover cable, parallel connection and direct disk-to-disk.
There is an organised user interface that makes viewing media contents straightforward. These views include a gallery of picture and image evidence and hex and file tree views. EnCase Forensic can also acquire many different media, including Palm Pilots and most types of removable media.
The product performed well under our testing parameters. It had a reasonable acquisition time and we were able to gather most of the data on our test disk. But it did miss some hidden or deleted data in unformatted sections of the test disk.
The program comes with plenty of documentation - a large paper manual and PDF manual that are clear, organised, easy to read and include a lot of screenshots and illustrations. The website has a wealth of applications, legal notes and other useful information, such as hash sets and scripts for its enScript scripting language.
The Guidance Software website is loaded with support options for EnCase. Support is available for both customer service and technical help and includes both phone and email support. There are also support videos and articles available on the website.
This product is a useful tool, but we thought that, at around £1,610 (almost three times that of its major competitor), the cost seems to be inflated out of proportion with the market.
We found that this tool does not perform significantly better than most of its competitors but is much more costly. It is a trend we have noticed with Guidance Software - raising prices to the point that only the largest organisations can afford the products.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Information Security Risk Manager, £45-55k + bens
Infosec People - West Midlands, England, Coventry
SOC Analyst, Aldershot, £55-63k + benefits
Infosec People - England, Aldershot, Hampshire
Security Architect, Cardiff - to £70k Basic
Infosec People - Cardiff, Wales
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Sign up to our newsletters
SC Magazine UK Articles
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Met Police grab suspect with phone unlocked to get hold of data
- Cyber-security must reflect risk not just regulation
- Data centres are on the move - where will they end up?
- Same fate befalls Post Office broadband as hit DT?
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- Former Expedia IT employee admits to hacking execs from the inside
- Cyber-insurance: What will you be able to claim for and is it worth it?
- Levelling the playing field against targeted attacks
- India Supreme Court calls on tech giants to curb sexual assault, cyber-crime
- IoTSF conference: EU should become de facto regulator