EnCase Endpoint Investigator 20.4 allows users to queue collection jobs from off-network sources for uninterrupted investigations of sporadically connected targets.
20.4 also introduces the new EnCase Evidence Viewer, a third party, satellite application that allows for collaborative investigations with EnCase data. Easily share case data with relevant outside parties, accept changes and proceed with the investigation.
Other updates in EnCase Forensic 20.4 include:
Be confident in your investigation findings using EnCase technology that is trusted by corporations and governments with a proven record of court acceptance. No other solution offers the same level of forensic capabilities and flexibility.
Be confident in your findings using the trusted, industry-leading digital forensics solution.
Simplify Triage Across Your NetworkIdentifying the relevance of potential evidence, prioritizing it, and determining whether further processing is needed are key aspects of the triage phase of an investigation. With EnCase Endpoint Investigator can quickly review information stored on computers across your network in real-time - without altering or damaging information.
More Data, More Devices - FasterEnCase Endpoint Investigator helps you acquire more evidence, faster than any product on the market. From every endpoint on your network, and even off-the-network endpoints - no matter where it's located. This is the flexibility needed to ensure you can complete your cases no matter where the potential evidence resides.
Automate the Routine, Focus on the InvestigationThe EnCase Endpoint Investigator evidence processor provides industry-leading processing capabilities that can automate the preparation of evidence, making it easier to complete the investigation. Powered by an indexing engine built for scale and performance, you can automate complex queries across your varied evidence sources in one step saving time and increasing your efficiency.
Bring Your Expertise to the ForefrontThe most important part of any investigation is your ability to analyze your evidence. EnCase Endpoint Investigator is built with the investigator in mind, providing a wide range of capabilities that enables you to perform deep forensic analysis as well as fast triage across your network from the same solution. Built to help you do what you do best: find evidence and close cases.
Analyze Evidence FasterBuilt-in Case Analyzer gives you deeper insight into computer systems through higher-level reports on metadata and the ability to compare potentially related artifacts side-by-side. This helps you provide a new level of analysis before sharing critical information with your extended investigation team in order to further your investigation. The Snapshot feature in EnCase Endpoint Investigator gives you the ability to readily capture and analyze RAM from target machines—even from numerous target computers concurrently. This simplifies the process of determining commonalities or exposing anomalies, which can be critical when investigating computer security incidents.
Powerful, Flexible ReportingAlready the most powerful, flexible reporting tool among digital-investigations platforms, EnCase Endpoint Investigator also gives you important capabilities that ensure you’ll never miss an important comment, bookmark, or other piece of important information when producing and sharing a report. It can:
Let us answer your questions or schedule a demo.