EnCase® Endpoint Investigator The Most Powerful and Easy-to-use Remote Forensic Security Solution Available

Learn more

Now available OpenText™ EnCase™ Endpoint Investigator 21.2

Improve investigation efficiency with the release of optical character recognition (OCR) support that seamlessly extracts embedded text from scanned images, documents and PDFs as part of the evidence collection workflow.

21.2 also expands social media artifact support and includes an enhanced workflow with a new summary view that allows users to cross-reference disparate artifact types, significantly improving evidence processing workflows.

Learn more Request a demo

Encase Technology Is Trusted by Corporations and Government Agencies Worldwide

You are tasked with more types of investigations than ever before; HR issues, compliance violations, regulatory inquiries, IP theft, and more. To meet the needs of your internal stakeholders you need visibility across your endpoints, no matter where they are, and that is what we provide.

  • Perform any type of internal or regulatory investigation
  • Collect data from off-the-network endpoints to keep your investigations moving
  • Work discreetly without interrupting the business or alerting employees

Be confident in your investigation findings using EnCase technology that is trusted by corporations and governments with a proven record of court acceptance. No other solution offers the same level of forensic capabilities and flexibility.

Technical Overview Download Product Brief

"Unquestionably the most powerful and versatile computer forensic tool available"

Request Demo Request Demo

Find What Matters with EnCase Endpoint Investigator

Be confident in your findings using the trusted, industry-leading digital forensics solution.

enterprise-slider

Triage

Simplify Triage Across Your Network

Identifying the relevance of potential evidence, prioritizing it, and determining whether further processing is needed are key aspects of the triage phase of an investigation. With EnCase Endpoint Investigator can quickly review information stored on computers across your network in real-time - without altering or damaging information.

enterprise-slider

Collect

More Data, More Devices - Faster

EnCase Endpoint Investigator helps you acquire more evidence, faster than any product on the market. From every endpoint on your network, and even off-the-network endpoints - no matter where it's located. This is the flexibility needed to ensure you can complete your cases no matter where the potential evidence resides.

enterprise-slider

Process

Automate the Routine, Focus on the Investigation

The EnCase Endpoint Investigator evidence processor provides industry-leading processing capabilities that can automate the preparation of evidence, making it easier to complete the investigation. Powered by an indexing engine built for scale and performance, you can automate complex queries across your varied evidence sources in one step saving time and increasing your efficiency.

enterprise-slider

Investigate

Bring Your Expertise to the Forefront

The most important part of any investigation is your ability to analyze your evidence. EnCase Endpoint Investigator is built with the investigator in mind, providing a wide range of capabilities that enables you to perform deep forensic analysis as well as fast triage across your network from the same solution. Built to help you do what you do best: find evidence and close cases.

enterprise-slider

Analyze

Analyze Evidence Faster

Built-in Case Analyzer gives you deeper insight into computer systems through higher-level reports on metadata and the ability to compare potentially related artifacts side-by-side. This helps you provide a new level of analysis before sharing critical information with your extended investigation team in order to further your investigation. The Snapshot feature in EnCase Endpoint Investigator gives you the ability to readily capture and analyze RAM from target machines—even from numerous target computers concurrently. This simplifies the process of determining commonalities or exposing anomalies, which can be critical when investigating computer security incidents.

enterprise-slider

Report

Powerful, Flexible Reporting

Already the most powerful, flexible reporting tool among digital-investigations platforms, EnCase Endpoint Investigator also gives you important capabilities that ensure you’ll never miss an important comment, bookmark, or other piece of important information when producing and sharing a report. It can:

  • Show in detail which information is presented and how
  • Export information into various file formats as needed
  • Export relevant evidence, investigator comments, bookmarks, search results, search criteria, pictures, date and time artifacts

Now introducing EnCase Mobile Investigator

EnCase Mobile Investigator was built with the investigator in mind. As investigations including mobile devices grow exponentially, investigators need a solution to keep up with the latest mobile devices, applications and operating systems so that criminals can be prosecuted. When coupled with EnCase Forensic, EnCase Mobile Investigator empowers forensic investigators to seamlessly acquire, review, analyze, and report on mobile evidence from the widest variety of devices so that no evidence is hidden. Unlike other traditional forensic solutions, EnCase Forensic and EnCase Mobile Investigator provide investigators with the flexibility, visibility, and ease-of-use to complete any forensic investigation from end to end.

Learn more

“As an office of one, EnCase Endpoint Investigator is my capstone forensic tool. It provides a critical force multiplication factor that allows me to keep up with my heavy workload of forensic cases in addition to my normal duties as Information Security Officer.”

Johnie Sullivan, Information Security Officer and Forensic Investigator, University of Nevada, Las Vegas

Ready to Talk?

Let us answer your questions or schedule a demo.