I was fortunate enough to get a sneak preview today of Encase V7 and WOW it has really changed quite a bit. One of the main feature of the new version is how it now focuses on a forensics process approach on the front end. For example when you add evidence it will now do all the E-mail,Hashing, File Slack, Folder Recovery, etc, etc. all in the very beginning in ONE VERY fast selections menu.
Another new thing that is bound to be very popular in the community is the new report writing template module. Basically you can now write a "template" for your cases and have numerous ones that will allow you to quickly auto fill AS you do your work. For example you are working a fraud case check the fraud template for that type of report. I can see a whole business model bases solely on Encase templates.
My personal favorite though was the new searching options. You can now FINALLY type in any word or EXTENSION and instantly find it through out the entire drive once it's been indexed. The new version has a TON of new stuff that it is using and it's new database engine is based off the newest version of "B-Tree". If anyone has any questions please let me know I'll try & answer them the best I can. I'm still pretty new in the community so go easy on me..lol.
BTW I forgot to mention the UI has COMPLETELY changed, however the older table pane, view pane, selection pane, etc. are still present.
I am not a big fan of report templates, they invite complacency on the part of the examiner.
For example when you add evidence it will now do all the E-mail,Hashing, File Slack, Folder Recovery, etc, etc. all in the very beginning in ONE VERY fast selections menu.
My personal favorite though was the new searching options. You can now FINALLY type in any word or EXTENSION and instantly find it through out the entire drive once it's been indexed.
Took a few years for it to catch up with some of the X-Ways Forensics basics then?! wink
For the last 3 years EnCase has been the Internet Explorer of forensic applications; examiners use it because it's often the default tool in their shop though other see that it's dated, that there's plenty of better and faster alternatives out there and when they (EnCase/IE) finally do get round to offering the same functionality that the rest have offered for years they make out that it's big news!
Having said that I am actually happy that EnCase may again become something I use rather than push to the back of the dongle drawer. The more capable tools to choose from the better. I want it to succeed.
@Jonathan
I'm still very new to this whole science & I've only used a little FTK & a TON of EnCase so naturally I'm biased. I'm sure many of the seasoned veterans out there agree with you though about EnCase catching up. =)
But who will be the first adopters? I see our dept personally holding on to 6.?? Until all the views, reports and bugs are fixed. I hope there are no bugs, but there is always teething issues. I use EnCase daily and a little FTK and it's the dream to have the ease of FTK with the power of EnCase I one. hopefully they have managed it, but time will tell.
I hope they have nailed it though! Would have loved a sneak peek. Was on the Mac course last week, the first time it was run and the preview was on the following Monday, but even with a full class badgering them for a sneak, sneak preview they must have been under strict order not to show until the Monday… Boo! Lol
When is the slated release? Is this upgrade covered by the maintenance agreement?
When is the slated release? Is this upgrade covered by the maintenance agreement?
1. BETA is scheduled for April/May
2. Yes it is covered under the maintenance agreement I've heard.
When is the slated release?
1. BETA is scheduled for April/May
That's potentially quite a long run in before full release date. I still hold pained memories of the FTK2 long promo run-in then the product itself. roll lol
No release date is set yet.
BTW I've got two people from Guidance on Forensic 4cast on April 10 to discuss the new release if anyone is interested in listening.
OK, so, in ther words, they have NO IDEA….. lol
I'd be interested in the Forensics 4cast….