Best Computer Forensics Tool

Winner: Guidance Software for EnCase Forensic

The computer is an infallible witness. It cannot lie. Digital evidence contains an unfiltered account of a suspect's activities, recorded in his or her direct words and actions. This type of evidence can provide the pivotal data investigators need to turn an open investigation into an open and shut case. In order to obtain and analyze this information in a rapid, cost-effective manner, investigators need a solution to help them produce evidence for existing charges, identify accomplices, add to charges and provide leads for other unsolved investigations. EnCase Forensic provides investigators with a powerful platform that collects digital data, performs analysis, reports on findings and preserves them in a court vetted, forensically sound format.

Organizations who use EnCase Forensic as their standard investigation solution experience a significant increase in productivity which equates to decreased cost per investigation. Without EnCase Forensic, investigators must spend countless hours combing through mountains of data, searching for information that may be relevant to their investigation. By using EnCase Forensic an investigator can automate the laborious process into a few simple steps. Once given directions, EnCase Forensic can search and collect evidence from vast datasets with unparalleled speed and accuracy.

With EnCase Forensic's ability to acquire data from most commonly used operating systems and to perform disk-level forensics on the acquired data efficiently, organizations are able to reach case resolution faster than ever before. Now organizations can complete more casework with the same number of resources, reducing their cost per case dramatically. Further, with EnCase Forensic, digital evidence cannot hide. The tool can find evidence that other solutions cannot due to the methods in which data is searched. By bypassing a computers operating system and accessing data at its base level, EnCase Forensic gives investigators an unaltered raw view of the contents of a computer. At this level of access, investigators can uncover evidence that can be the key to a successful case resolution. The benefit to the organization here can be invaluable, whether protecting an organization's IP or putting a dangerous criminal behind bars.

Guidance Software is a market leader in this space with more than 35,000 copies of EnCase Forensic sold.


• AccessData Group for Forensic Toolkit (FTK)

• ArcSight for ArcSight Logger

• Guidance Software for EnCase Forensic

• NetWitness for NetWitness NextGen 9.5

• Quest Software for Quest ChangeAuditor

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.