Difference between revisions of "EnCase"
From Forensics Wiki
m (Reverted edits by OloelLivic (Talk) to last version by Jessek) |
(→Hash Databases) |
||
| Line 7: | Line 7: | ||
==Hash Databases== | ==Hash Databases== | ||
{{main|Encase hash files}} | {{main|Encase hash files}} | ||
| − | Encase uses [[MD5]] hashes and uses a [[Encase hash files|proprietary file format]] to store them. It can also import hashes from the [[National Software Reference Library|NSRL]], [[Hashkeeper]], and plain MD5 files. | + | Encase uses [[MD5]] hashes and uses a [[Encase hash files|proprietary file format]] to store them, either singly or in a "hash map". It can also import hashes from the [[National Software Reference Library|NSRL]], [[Hashkeeper]], and plain MD5 files. |
== See Also == | == See Also == | ||
Revision as of 16:23, 1 November 2010
EnCase is a family of all-in-one computer forensics suites sold by Guidance Software. These products include EnCase Enterprise, EnCase Forensic Edition, EnCase eDiscovery, and EnCase Lab Edition. These programs use a proprietary image file format that has been reverse engineered. Users can create scripts, called EnScripts, to automate tasks.
Contents |
