Version 7 Tech Tip #2: Processing Multiple Cases Serially from a Single Workstation

Jasper Rowe

Did you know you can use a single instance of EnCase® to queue jobs from different cases? 

In previous versions, it was possible to process multiple cases simultaneously using multiple sessions of EnCase. Even though the licensing allowed for this, the processing itself would have had to rely on shared resources. 

Since the introduction of the Processor Manager, using multiple instances of EnCase for evidence processing is no longer possible, as the Processor Manager only allows for one local processing node. If you try to open a secondary instance of EnCase and its Evidence Processor, you’ll receive an error message like this:

Evidence Processor error message

If you have not configured any remote nodes for distributed processing, you can still use your main forensic workstation to process different cases serially on your local workstation. This equates to a much better use of your available resources and allows the examiner to queue various jobs so that they run without user intervention.

The EnCase Processor Manager

After configuring jobs to run via the Evidence Processor options window, they will appear in the View à Processor Manager screen, allowing you to set your preferred sequence of processing. You can find more details in the latest EnCase User Guide in the chapter called Processing Evidence.

Jasper Rowe is a Senior Technical Services Engineer at Guidance Software. 

No comments :

Post a Comment