Anyone using EnCase...
 
Notifications
Clear all

Anyone using EnCase Enterprise v7 out in the wild ?

3 Posts
3 Users
0 Likes
337 Views
(@ddelija)
Posts: 14
Active Member
Topic starter
 

Hi !

I'm preparing redeployement of Encase, so I'm interested in real life experience about
Enterprise v7 in real life. It will be from scratch since v6 was not really used.

Basicall I'm thinking in parallel instalation for examiners, both v6 and v7 since many good v6 features are
missing from v7

Anyone using EnCase Enterprise v7 out in the wild ? What about performance issues etc ?
Reports, scripts ?

 
Posted : 22/10/2012 10:13 am
(@rleviseur)
Posts: 3
New Member
 

I currently have it deployed, though I doubt you could consider it "in use".

Having done a few test investigations and attempted a few real ones with it so far, the processing time is far too long to be of use. I have had to resort to other more manual methods of performing them as they are still quicker than waiting on the processing from EnCase.

When it actually is finished processing evidence, the results and reporting still aren't up to par for my needs (may differ for others). There was a script for one of the reports I need that worked on v6, but apparently does not work on v7.

I haven't tried the latest 7.05 (currently on 7.04). But personally, I don't see myself renewing our SMS when it is up early next year. I'll probably use the money for a decent web proxy which will solve half the requested investigation requirements here.

 
Posted : 31/10/2012 6:30 pm
pbobby
(@pbobby)
Posts: 239
Estimable Member
 

We use v7 enterprise (with v6 and v7 clients) in our workplace and it is working just fine for us.

As for performance issues, preview for triage works just fine - be aware of your network bandwidth issues though. For example, don't expect stellar performance when you're working a box through a T1 to a remote satellite site that 25 other computer users share.

 
Posted : 06/11/2012 1:31 am
Share: