Hi there,
I was recently assigned to find out what EnCase (no option for other software) related materials we need to purchase to set up a small lab.
From my undertanding the 'EnCase Forensic V6' is the basic platform, which is required to run the additional modules (like SE and PDE), but I need assistance on clarifying something…
Is the 'EnCase Forensic V6' indeed a basic platform, which is required to run the additional modules? Does it run alone (in terms of performance sufficiency) and can the modules work on a stand alone mode?
Thanks!
p.s. Any input or direction to find information is appreciated, as I would like to have an opinion from someone that has experience with the tool.
The modules work from within EnCase and are not stand-alone. All the modules (PDE, VFS, EDS, SE, CD/DVD) are already in EnCase but you can only use what you've paid for. Once you launch EnCase you use the modules and everything else from within EnCase.
You may want to call GSI and ask them whatever questions you have. Steve Bunting's book "EnCE Study Guide" is a good referrence for doing exams with EnCase. Lots of people here have experience with EnCase.
Oh, don't forget to budget for EnCase training. If you talk to GSI sales, they could probably get you one quote for the whole shabang.
Balzanto,
thanks for the info. I have experience with EnCase only from the university, but i was never involved in the purchase process, so as to see how you 'buy' the platform.
Already got the book, … though, i am still trying to find free time to work on it!
Again thanks for the help!