Tag Archives: EnCase 7.1 and FTK 5.5 Tool Evaluation

EnCase 7.1 and FTK 5.5 Tool Evaluation Part 4

Data Generation In order to test and examine the new editions of EnCase and FTK, we need a hard drive with existing data to work with. We want to have something specific to look for when we analyze the drives later on, so we are conducting controlled data generation using computers built for this project […]

Continue reading

EnCase 7.1 and FTK 5.5 Tool Evaluation Part 3

EnCase v7.10 Updates Windows 8.1 and Server 2012 R2 Support EnCase 7.10, EnCase Examiner, SAFE, and the servlet all support Windows 8.1 and Windows Server 2012 R2. Systems running Windows 8.1 via the Evidence Processor (specifically the Windows Artifact parser) and BitLocker encryption are also supported now, and EnCase system requirements and recommended configurations are […]

Continue reading