EnCase Forensics

1
EnCase Forensics

• Chantel Bowie
• Digital Forensics
• Fall 2K7 Term Project

2
Introduction

• Technology
• Crimes
• Forensics
• Digital Forensics
• EnCase Forensics

3
Product Description

• Industry Standard
• Simple
• Complex investigations
• Analyze, search
• Large amounts of data
• Quickly
• Intuitive graphical user interface (GUI)
• Easy navigation

4
Product Description

• Powerful search engine
• Proximity Search
• Keyword
• Email Internet Search
• Email (various) across numerous entities

5
Product Description

• Editions
• EnCase Forensics
• Runs on Windows
• General, simple
• EnCase Enterprise Edition
• Major organizations
• Powerful, network-enabled solution
• EnCase Linen Utility
• Runs on Linux
• Handle large drives, acquire data faster

6
How It Works
7
Uses

• Forensic investigators
• Criminal mischief
• Law enforcement, govt., corporate investigators,
  consultants
• Trace electronic trails
• Analyze drives for new files, new processes
• Artifacts related to Internet, email

8
Labs

• Lab 1
• Email Investigation
• Lab 2
• Imaging Suspect Media
• Lab 2 before Lab 1
• DEMO version

9
References

• http//www.guidancesoftware.com/products/ef_index.
  asp
• http//www.darkreading.com/document.asp?doc_id126
  009
• Course Site
• http//www.cis.famu.edu/cbowie/DigitalForensics/