EnCase Forensic gives investigators the ability to image a drive and preserve it in a forensic manner using the EnCase evidence file format (LEF or E01), a digital evidence container vetted by courts worldwide. EnCase Forensic also contains a full suite of analysis, bookmarking, and reporting features. Guidance Software has beefed up encryption support in its latest release of EnCase Forensic, version 6.18. It now provides the ability to detect and, with proper credentials, decrypt volumes encrypted using Windows 7 BitLocker and Windows 7 BitLocker to Go, among other products.

Request more information