Winner: Guidance Software for EnCase Forensic
EnCase Forensic is designed for law enforcement and security analysts who need to investigate all types of digital storage devices. It facilitates the search, identification, collection, preservation, analysis and reporting of digital evidence in a court-approved manner. It is the only computer forensic application that has withstood numerous court challenges worldwide.
EnCase has been used in hundreds of thousands of cases worldwide and mentioned in more than 70 published court cases. The EnCase Evidence File, a container for digital evidence that maintains and verifies the chain-of-custody of digital evidence, is a robust evidence container. Tens of thousands of users have worked with EnCase software. Thousands of people have attained EnCase Certified Examiner status. Millions of cases have used EnCase Evidence Files. Nearly every eDiscovery service provider uses EnCase Evidence File. This level of court validation, and the fact that EnCase Evidence Files are a leading preservation/authentication mechanism for digital evidence, makes it the most credible way to collect forensically sound electronic data in the industry today.
EnCase's passive servlet (agent) is simply installed on all machines on the network and awaits instructions. Moreover, it provides a secure way to manage IT/legal personnel's access to network assets. Through the use of Secure Authentication for EnCase (SAFE), users can be restricted from performing search and collect activities in a number of different ways, including by subnetwork, time of day, region, etc. Additionally, all user activity is logged, ensuring compliance with regulatory guidelines.
With EnCase, an enterprise can expect to see a significant reduction in costs associated with electronic data collection. The software's ability to search and collect information over the network in a non-intrusive way allows enterprises to avoid expensive travel costs since it eliminates the need to have personnel travel to remote locations to gather data. Positive customer return on investment (ROI) generally occurs in the short term after implementing EnCase.
Though no analyst firm tracks computer forensic shipments, many professionals in the computer forensics community say Guidance Software is the market leader in this space with more than 33,000 copies of EnCase Forensic sold.
- ArcSight for ArcSight Logger
- Guidance Software for EnCase Forensic
- NetWitness for NetWitness NextGen 9.0
- Quest Software for Quest ChangeAuditor
- Solera Networks for Solera DS Network Forensics Appliances