Hi everyone!,
My company has asked me to set up EnCase 7 Enterprise to be able to perform remote acquisitions across our network. I am familiar with EnCase, but I have never used it like this before. My question is…..if I have a FRED machine and EnCase Enterprise addition am I ready to start setting it up? Do I need anything else (hardware, software, etc.). My boss wants to know what I will need so he can budget it out but I am having a hard time finding the answer to this. Additionally, if anyone has general tips when it comes to setting this up it would be greatly appreciated. We are a large company with about 180,000 endpoints.
Please and Thank You!
Hi,
I don't know price about EnCase Enterprise, but I did install and setup EnCase Enterprise several months ago. Let me tell you some about it.
There are three roles SAFE Server, Subjects, and the Examiners. The Examiners have to logon to the SAFE server(don't forget where the public key/private key is….) and decide which Subjects to be examined. Of course you need to deploy servlet on those PCs or laptops first. The best way to deploy servlet is M$ Active Directory software distribution. Servlets support lots platforms and I've deployed them on Windwos, Mac , and Linux…
You can do memory dump or analysis when those Subjects up and running, even do acquiring over LAN is OK, of course the average speed depends on the bandwidth…