Showing posts with label Development. Show all posts
Showing posts with label Development. Show all posts

Open for Business: Proactive Discovery Joins Technology Alliance Program

Jason Fredrickson

This week we celebrate bringing Proactive Discovery, a leader in the high-tech crime investigations and e-discovery services markets, into our Guidance Software Technology Alliance Program. I’m delighted to have Martin Siefert and his team as part of the alliance. They are sharp developers with deep expertise developing apps that extend our core EnCase® technology–and that make a difference to investigators and information security professionals every day.

Proactive Discovery has a proven record of developing custom EnCase solutions to solve specific challenges faced by their customers, ranging from forensic tools to custom data carvers to enterprise incident-response tools and more. Integrating their work with EnCase is a great example of how we’re proving what our CEO, Victor Limongelli, said in his welcome keynote at CEIC 2013 last May: Guidance Software and EnCase are “open for business.”

EnCase Forensic – A Development Perspective

Ken Basore With the release of EnCase v7.03, I wanted to highlight for you a few things that we have been working on over the past several months. Since the release of Version 7, we have heard from many of you that the processing speeds were not acceptable. In addition, we have heard from some of you that there were elements of the new user interface that did not make it easy for you to work your cases the way you prefer. Well, we have listened carefully to all of this feedback, and our Development team has worked hard to make Version 7 easier to use and more robust than any other product, including our own Version 6. With EnCase v7.03, we concentrated on several key areas that were either of concern to our users or could advance the product in important ways.
  • Evidence Processor Performance
  • Support for Text Indexing in Slack and Unallocated Space
  • Compressed review of Search hits
  • Additional Artifacts including attached USB devices and mounted network shares
With respect to the first item, we looked at many different types of evidence and found certain areas where we could optimize how EnCase handles the vast amount of data that can be generated during processing. We changed how some data was stored, as well as how often EnCase reads from certain data files, and when we were done v7.03 processed the same evidence 2 – 3 times faster than v7.02. When you add in that EnCase now also indexes slack and unallocated space, the improvement is even more substantial, and users can now expect processing to complete much faster.