Just thought I'd let everyone know, not sure who does and who doesn't know…
encase 6 case files are NOT compatible with version 7. You have to start a completly new case file if you want to use 7.
tweet from Steve_at_EnCase (Steve Salinas)
@******** You need to create a new case in #EF7, the v6 case files aren't compatible with v7.
Jul 06, 332 PM via TweetDeck
just lovely!!!!
Not unexpected
Greetings,
A new case file format is not unexpected. A migration tool would be very welcome, though.
-David
A migration tool would be very welcome, though.
I second this.
agree, its rather insane that this has not been looked at - encase 7 automatically opens 6.18 case files also, so don't get confused if it does it…
Not at all surprising given the history of encase.
My other big complain would be not being able to view mounted files (ZIP, RAR, etc..) in the same view as other loaded evidence! So a zip file is no longer inline mounted into the same path. You have to view it separately as if it were not part of the original evidence.
Flattening the tree(s) to view everything (incl mounted files) under one view (greenplate) was one of the biggest plus points of encase. Now you can't do that.
its a bit of a headache to get your head around all the major changes, it would have been nice for them to have given a quick how to on how to do the basics, for example you can no longer right click on a file and just export it out… and for the life of me I can't find a way to do it, but then I haven't got time to go through the 700 page Encase 7 Essentials document that I downloaded. I've gone back to 6.18 for the time being until I've got time to work out the in's and out's of 7.
I would recommend that most that are thinking of upgrading wait or run 6 and 7 so that they can revert back to 6.
It took me about 4 days to index a case, and was it of any use, did the keyword search reveal anything etc etc? NO, a little miffed with 7 to say the least.
its a bit of a headache to get your head around all the major changes, it would have been nice for them to have given a quick how to on how to do the basics, for example you can no longer right click on a file and just export it out… and for the life of me I can't find a way to do it, but then I haven't got time to go through the 700 page Encase 7 Essentials document that I downloaded. I've gone back to 6.18 for the time being until I've got time to work out the in's and out's of 7.
I would recommend that most that are thinking of upgrading wait or run 6 and 7 so that they can revert back to 6.
It took me about 4 days to index a case, and was it of any use, did the keyword search reveal anything etc etc? NO, a little miffed with 7 to say the least.
In case you didn't know, GS did put together a set of helpful training videos on EnCase7. http//
Also, for some reason, imaging using the new Ex01 format is actually slower than the older E01 format. I find it strange how none of these 'bugs' were discovered during the beta.
that's useful thank you, I don't have access to that site at the moment, I shall take a look if I can.