.

EnCase Portable

<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Wed Jul 08, 2009 2:36 am

EnCase Portable

Morning All,

EnCase are launching a new product called EnCase Portable. Its a USB Data gathering tool, so you basically plug and go. I havent seen it for myself yet but I assume its similar to the Microsoft Cofee offering to law enforcement, although the EnCase version wont be free. So plug the device into the machine (boot depending on the situation) and then select the information you need from the menu, and away goes the tool.

I have posted a little bit of information, with a video on my blog if you want a looksee.

EnCase Portable kit includes:

    * 4GB USB drive with EnCase Portable preinstalled
    * 16GB drive for additional storage
    * 4 port USB hub
    * EnCase Portable security key
    * User guide
    * EnCase Portable installation CD
    * Carrying Case
Key Features

    * Plug in and collect data immediately
    * Enable novice computer users to be data collectors in matter of minutes
    * Acquire data anywhere with EnCase Portable’s pocket-sized kit
    * Search and collect cyber-intelligence without leaving a trace
    * Store collected data in the forensically sound, court-validated EnCase® Logical Evidence File format
    * Capture data from running or powered-off systems
    * Customize search and collection jobs to create and configure more complex search criteria
    * Easily install EnCase Portable on any USB drive

I think this is a good thing, in that any old Tom, Dick or Harry in the field can be sent out to carry out data collection with little training, and no software experiance and then send back to the lab for the real work to be done.
I am sure people will be sceptical, and questions needs to be answered, but I think we will see similar offerings from other vendors in the future.
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Wed Jul 08, 2009 5:55 am

Re: EnCase Portable

Nice to see they're making an official release. There's been an older version of EnCase ported to portable floating around for a while.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Wed Jul 08, 2009 5:59 am

Re: EnCase Portable

Guess I will have a closer look at it, thanks for the info.

Searched some time ago for the mentioned coffee but it looks like there is hardly a possibility to get it as a private person. Would love to get my hands on it tough.
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Wed Jul 08, 2009 6:47 am

Re: EnCase Portable

awesec wrote:Guess I will have a closer look at it, thanks for the info.

Searched some time ago for the mentioned coffee but it looks like there is hardly a possibility to get it as a private person. Would love to get my hands on it tough.


Cant give much detail, but I might be able to assist in the future as I plan to review for my blog.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Thu Jul 09, 2009 1:30 am

Re: EnCase Portable

Good to know, thanks.

Just curious but has someone hands-on experience with coffee and could supply some more information as already available? Don't know if this is allowed or not though.
<<

washington678

Post Thu Jul 09, 2009 8:15 pm

Re: EnCase Portable

Thanks a lot.  I think it's funny too.



pret auto
<<

Spikyles

Newbie
Newbie

Posts: 2

Joined: Thu Sep 03, 2009 3:42 pm

Post Fri Sep 04, 2009 12:04 am

Re: EnCase Portable

I just got my ENCASE Portable. I have not used it just yet, but as soon as I do, I will post here.  It is a really neet, slim pack, and I am excited to see exactly how it performs.
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Fri Sep 04, 2009 7:24 am

Re: EnCase Portable

Oh, please let us know how it does.  I have been applying gentle pressure on my boss to get one for us to play with.  Perhaps I need to step up the pressure.
~~~~~~~~~~~~~~
Ketchup
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Fri Sep 04, 2009 1:00 pm

Re: EnCase Portable

Just a quick update, I have had a little look at WOLF / COFEE and it does seem a good tool. I am not sure if its the same version that has been given to the police forces etc, but there did seem to be some issues around running it with the appropriate priv's, it also needed access to the logged in system and I am not to sure this was the original goal.

Obviously as this a Microsoft internal tool, support outside is limited.
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Fri Sep 04, 2009 1:05 pm

Re: EnCase Portable

Spikyles wrote:I just got my ENCASE Portable. I have not used it just yet, but as soon as I do, I will post here.  It is a really neet, slim pack, and I am excited to see exactly how it performs.


Spikyles I also look forward to hearing how you get on with the new offering.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Fri Sep 04, 2009 3:28 pm

Re: EnCase Portable

@dalepearson: Is WOLF the same as COFFEE? Did a quick search and couldn't find much information about it.
May I ask where you could test it? Would be very interested to test it out as well. :)
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Tue Sep 08, 2009 1:23 pm

Re: EnCase Portable

My understanding is that WOLF "Windows On Line Forensics" is the inhouse MS tool, and COFEE is what they have put together for law enforcement.

Obviously I have not seen both to make a comparison, so its all theory.
Last edited by dalepearson on Wed Sep 09, 2009 1:18 am, edited 1 time in total.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Tue Sep 08, 2009 2:21 pm

Re: EnCase Portable

Thanks for clarification. Didn't came across WOLF before.

May I ask where you had the chance to test it? Just curious.
<<

dalepearson

Sr. Member
Sr. Member

Posts: 357

Joined: Thu Nov 09, 2006 10:03 am

Post Tue Sep 08, 2009 3:40 pm

Re: EnCase Portable

I was able to get a little looksee from someone who knows someone at Microsoft.

Return to Forensics

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software