EnCase: A question.

  • Thread starter Thread starter Frank Martin
  • Start date Start date
F

Frank Martin

I have a copy of the EnCase 4.0 proprietary software used by
authorities to record a computer's past activity.

Has anyone experience with this? I can't figure out how to
use it.

Can this software be used as an computer search device for
finding files and registry entries, since it seems to have
more options than the Windows "search" function.

I have WindowsXP pro with SP3.

Regards, Frank
 
Frank Martin said:
I have a copy of the EnCase 4.0 proprietary software used by
authorities to record a computer's past activity.

Has anyone experience with this? I can't figure out how to
use it.

Can this software be used as an computer search device for
finding files and registry entries, since it seems to have
more options than the Windows "search" function.

I have WindowsXP pro with SP3.

Regards, Frank
Click to expand...
Might be better to ask the makers of the software how to use THEIR software.
 
Frank said:
I have a copy of the EnCase 4.0 proprietary software used by
authorities to record a computer's past activity.
Can this software be used as an computer search device for
finding files and registry entries, since it seems to have
more options than the Windows "search" function.
Click to expand...


Hi Frank,

EnCase is the product of Guidance Software:

http://www.guidancesoftware.com

It sounds like you're interested in using it as a kind of search tool?
That's probably not a great idea. EnCase is a pretty complex product,
and highly oriented towards its specific forensic function. It is not a
general-purpose search tool.

If you do want to use EnCase for a investigatory function, your best bet
is to contact Guardian Software - they have lots of training and support
options.

But if you want a general purpose search tool, your best bet would be to
use either Windows Desktop Search, or a similar third party product,
like Google Desktop Search, dTSearch or Isys.

Hope it helps,

Andrew
 
Andrew McLaren said:
Hi Frank,

EnCase is the product of Guidance Software:

http://www.guidancesoftware.com

It sounds like you're interested in using it as a kind of
search tool? That's probably not a great idea. EnCase is a
pretty complex product, and highly oriented towards its
specific forensic function. It is not a general-purpose
search tool.

If you do want to use EnCase for a investigatory function,
your best bet is to contact Guardian Software - they have
lots of training and support options.

But if you want a general purpose search tool, your best
bet would be to use either Windows Desktop Search, or a
similar third party product, like Google Desktop Search,
dTSearch or Isys.

Hope it helps,

Andrew
Click to expand...

Thanks Andrew, I'll try.
 
Back
Top