EnCase
From Wikipedia, the free encyclopedia
EnCase is the shared technology within a suite of digital investigations products by Guidance Software (acquired by OpenText in 2017[2]). The software comes in several products designed for forensic, cyber security, security analytics, and e-discovery use. EnCase is traditionally used in forensics to recover evidence from seized hard drives. It allows the investigator to conduct in-depth analysis of user files to collect evidence such as documents, pictures, internet history and Windows Registry information.
![]() | |
![]() Blank EnCase (V6.16.1) project file | |
Developer(s) | Guidance Software, OpenTextk |
---|---|
Initial release | 1998 |
Stable release | |
Operating system | Windows |
Available in | English |
Type | Computer forensics |
Website | www |
The company also offers EnCase training and certification.
Data recovered by EnCase has been used in various court systems, such as in the cases of the BTK Killer and the murder of Danielle van Dam.[3][4] Additional EnCase forensic work was documented in other cases such as the evidence provided for the Casey Anthony, Unabomber, and Mucko (Wakefield Massacre) cases.