Showing posts with label Evidence Processor. Show all posts
Showing posts with label Evidence Processor. Show all posts

Version 7 Tech Tip #2: Processing Multiple Cases Serially from a Single Workstation

Jasper Rowe

Did you know you can use a single instance of EnCase® to queue jobs from different cases? 

In previous versions, it was possible to process multiple cases simultaneously using multiple sessions of EnCase. Even though the licensing allowed for this, the processing itself would have had to rely on shared resources. 

EnCase Evidence Processor Manager: Working the Backlog

Ken Mizota

I am often asked the question: "When is EnCase going to be able to distribute processing?" EnCase customers have a naturally voracious appetite for processing: As case backlogs grow over time and technology. I’ll define a backlog as a set of evidence, awaiting review by an Investigator. While EnCase Evidence Processor introduced powerful automation capabilities, the task of centrally distributing, prioritizing and managing evidence processing has been largely left up to the best effort of the Investigator.

IEF Evidence Processor Module for EnCase v7

Lance Mueller

Magnet Forensics has released the Internet Evidence FinderTM (IEF) Evidence Processor Module for EnCase v7. The IEF Evidence Processor Module for EnCase v7 is designed to assist digital investigators with their workflow by allowing them to run Internet Evidence Finder (IEF) from within EnCase, without the need to start IEF separately and point to the same evidence files you already have loaded in EnCase.

Evidence Processor Performance Monitoring - Part II

Guidance Software

Feature Spotlight: Performance Test

In the last feature spotlight, I described the new Performance tab in EnCase Version 7.07. In particular, once you have visibility to the performance of Evidence Processor within EnCase, following questions quickly arise:
  1. What can I do to speed up Evidence Processor from a hardware perspective?
  2. When Evidence Processor is taking longer than expected, what kind of information can I share with Guidance?

Evidence Processor Performance Monitoring - Part I

Ken Mizota

Over the years, digital investigators using EnCase have become intimately familiar with EnCase status reporting for EnScripts and in recent years, Evidence Processor. Over the years, progress reporting in EnCase has more or less, looked like this: