Notifications
Clear all

Encase versions

4 Posts
3 Users
0 Likes
1,347 Views
mgilhespy
(@mgilhespy)
Posts: 102
Estimable Member
Topic starter
 

Dear members - folks in my organisation are currently pushing to have budget allocated for the purpose of purchasing Encase. The primary requirement is to support a growing (globally distributed) forensics team, although I'm sure that at some point e-discovery capabilities will also be desirable.

I remember reading some comments from members about various versions of Encase, specifically regarding the perceived usefulness (or not) of the tool for forensics (in contrast with e-discovery). Those threads are quite old, so I wanted to ask the group for a current opinion on the best version of Encase to deploy for our situation.

Thanks in advance for any comments.

 
Posted : 23/09/2014 1:41 pm
4Rensics
(@4rensics)
Posts: 255
Reputable Member
 

For what its worth, my two cents would be to always go with the latest versions. Mainly because any bug fixes should be upto date, the software will be supported and help should always be on hand should issues arise. Also, with EnCase, you can only get trained up in 7 from now on if I recall.

But… saying that. We have not moved to EnCase 7 and are still using v6.19.7. But for us, the factors are

- Its stable

- WAY TOO EXPENSIVE FOR THE TRANSITION (Looking at you EnCase!!!) - what ever it is x 7 and the UK Gov just wont pay it, its not in the budget. The money (millions) gets spent on a pointless vote in Scotland instead!) I digress!

- The EnScripts we use and there are lots, all work perfectly and there are not quite sufficient "App" replacements to take v6 offline for us yet.

As a collective (in our office) we have discussed this and we really want to and need to go to version 7, and we have it and licenses for it and have tried it, but its just too different to pick up and use without error. The scripts we have created, we don't know how to re-write them, because the courses are too expensive and our budget is constantly getting cut, but courses go up with inflation, but our budget goes down. Its a lose-lose situation for the UK Gov employees.

OK. Glad I got that off my chest.

But, if you can afford it, I would ALWAYS go with the latest, so that would be EnCase 7. You are almost guaranteed the help and support of the providers and community should you need it.

Sorry for the rant, hope this helps!

4F

 
Posted : 23/09/2014 7:45 pm
mgilhespy
(@mgilhespy)
Posts: 102
Estimable Member
Topic starter
 

For what its worth


Sorry for the rant, hope this helps!

4F

Thanks, that does help! I've had a very strong recommendation off-thread to make sure we remain focused on V7 for a variety of reasons, some of which you touch on. We don't have a blank cheque for this, so cost does need to be justified, but I think I have what I need.

–MG

 
Posted : 24/09/2014 2:32 pm
jhup
 jhup
(@jhup)
Posts: 1442
Noble Member
 

Or… wait till 8 which supposed to come out by "end of year".

As of now, I know several major flaws in 7.x, including the latest 7.10…

I test often, for now, with other tools. It is a pain.

 
Posted : 27/09/2014 12:00 am
Share: