Open for Business: Proactive Discovery Joins Technology Alliance Program

Jason Fredrickson

This week we celebrate bringing Proactive Discovery, a leader in the high-tech crime investigations and e-discovery services markets, into our Guidance Software Technology Alliance Program. I’m delighted to have Martin Siefert and his team as part of the alliance. They are sharp developers with deep expertise developing apps that extend our core EnCase® technology–and that make a difference to investigators and information security professionals every day.

Proactive Discovery has a proven record of developing custom EnCase solutions to solve specific challenges faced by their customers, ranging from forensic tools to custom data carvers to enterprise incident-response tools and more. Integrating their work with EnCase is a great example of how we’re proving what our CEO, Victor Limongelli, said in his welcome keynote at CEIC 2013 last May: Guidance Software and EnCase are “open for business.”

Image Analyzer – A Case Simulation in EnCase Forensic

Robert Bond

A new release of Image Analyzer is now available on App Central that now supports the scanning of images for pornographic content in both entries and records. This means investigators can analyze images in the records tab that have been extracted from email archives and compounded files.

Let’s take a look at how an investigator might use Image Analyzer as part of an investigation involving email misuse in a large corporate environment.

Image Analyzer – Categorizer App for Pictures

Robert Bond

The task of correctly identifying pornographic images in either criminal or civil investigations can be very time consuming and is often like looking for a ‘needle in a haystack’. A single case can contain thousands or even millions of images, most of which are not relevant to the investigation. Even when reviewing images in a convenient thumbnail gallery, a human can only moderate about 5000 images per hour when fatigue is taken into consideration. Therefore cases requiring image review are typically labour intensive and are often postponed; creating a backlog of cases which further compounds the issue.

Guidance Software and Digital Intelligence Partner with PROTECT and it’s H.E.R.O. Corp

Robert Bond

The National Association to Protect Children, PROTECT, is an organization with a mission to rescue children from abuse and exploitation. The organization has grown in size and support since it was founded in 2003, and its list of accomplishments includes drafting and supporting the passage of the landmark legislation, Alicia’s Law.

EnCase Evidence Processor Manager: Working the Backlog

Ken Mizota

I am often asked the question: "When is EnCase going to be able to distribute processing?" EnCase customers have a naturally voracious appetite for processing: As case backlogs grow over time and technology. I’ll define a backlog as a set of evidence, awaiting review by an Investigator. While EnCase Evidence Processor introduced powerful automation capabilities, the task of centrally distributing, prioritizing and managing evidence processing has been largely left up to the best effort of the Investigator.

IEF Evidence Processor Module for EnCase v7

Lance Mueller

Magnet Forensics has released the Internet Evidence FinderTM (IEF) Evidence Processor Module for EnCase v7. The IEF Evidence Processor Module for EnCase v7 is designed to assist digital investigators with their workflow by allowing them to run Internet Evidence Finder (IEF) from within EnCase, without the need to start IEF separately and point to the same evidence files you already have loaded in EnCase.

EnCase App Central Delivers its 10,000th App

Guidance Software

EnCase App Central opened its virtual doors in early spring this year with the goal of providing functionality and efficiency to EnCase users by offering EnScripts, templates, and 3rd party Apps. After just a few months, driven by the power of the EnCase community and our 3rd party partners; App Central has become the primary source of efficiency-driving solutions for the tens of thousands of EnCase users worldwide.

Evidence Processor Performance Monitoring - Part II

Guidance Software

Feature Spotlight: Performance Test

In the last feature spotlight, I described the new Performance tab in EnCase Version 7.07. In particular, once you have visibility to the performance of Evidence Processor within EnCase, following questions quickly arise:

1. What can I do to speed up Evidence Processor from a hardware perspective?
2. When Evidence Processor is taking longer than expected, what kind of information can I share with Guidance?

Evidence Processor Performance Monitoring - Part I

Ken Mizota

Over the years, digital investigators using EnCase have become intimately familiar with EnCase status reporting for EnScripts and in recent years, Evidence Processor. Over the years, progress reporting in EnCase has more or less, looked like this:

How Does Integration Help You as an Investigator?

Lance Mueller

A new IEF/EnCase Processor Module will be available September 12th.

The IEF/EnCase Connector referenced in the Blog is available here.

Let’s imagine I have been assigned to investigate case involving an employee who is suspected of posting threatening comments on a co-worker’s Facebook account (this could either be an internal employee misconduct or criminal investigation). The messages were sent yesterday.