EnCase Forensic Version 6.11
User's Guide
Copyright © 2008 Guidance Software, Inc. All rights reserved.
EnCase®, EnScript®, FastBloc®, Guidance Software® and EnCE® are registered trademarks or
trademarks owned by Guidance Software in the United States and other jurisdictions and may
not be used without prior written permission. All other marks and brands may be claimed as the
property of their respective owners.
No part of this document may be copied or reproduced without the written permission of
Guidance Software, Inc. Products and corporate names appearing in this manual may or may
not be registered trademarks or copyrights of their respective companies, and are used only for
identification or explanation into the ownersʹ benefit, without intent to infringe. Any use and
duplication of this material is subject to the terms of the license agreement between you and
Guidance Software, Inc. Except as stated in the license agreement or as otherwise permitted
under Sections 107 or 108 of the 1976 United States Copyright Act, no part of this publication
may be reproduced, stored in a retrieval system or transmitted in any form or by any means,
electronic, mechanical, photocopying, recording, scanning or otherwise. Product manuals and
documentation are specific to the software versions for which they are written. For previous or
outdated manuals, product release information, contact Guidance Software, Inc. at
http://www.guidancesoftware.com. Specifications and information contained in this manual are
furnished for informational use only, and are subject to change at any time without notice.
i
Contents
CHAPTER 1 Introduction
15
Introduction................................................................................................................................................... 16
CHAPTER 2 New Features
17
LEF EFS Encryption Enhancement............................................................................................................. 18
WinEn............................................................................................................................................................. 18
Snapshot to DB Module Set......................................................................................................................... 19
Lotus Notes Local Database Encryption.................................................................................................... 19
EnCase Examiner Support for Microsoft Vista ......................................................................................... 19
64‐Bit EnCase Servlet.................................................................................................................................... 19
Send to HBGary Responder EnScript ........................................................................................................ 20
CHAPTER 3 Installing EnCase Forensic
21
The EnCase Installer ..................................................................................................................................... 22
Minimum Requirements ........................................................................................................................ 22
Installing the Examiner........................................................................................................................... 23
Installed Files ........................................................................................................................................... 25
Uninstalling the Examiner ..................................................................................................................... 26
Reinstalling the Examiner ...................................................................................................................... 28
Installing Security Keys ............................................................................................................................... 29
Troubleshooting Security Keys ................................................................................................................... 29
Obtaining Updates........................................................................................................................................ 30
Configuring Your EnCase Application...................................................................................................... 30
Case Options Tab .................................................................................................................................... 32
Global Tab ................................................................................................................................................ 33
Color Tab .................................................................................................................................................. 35
Fonts Tab of the Options Dialog ........................................................................................................... 36
EnScript Tab............................................................................................................................................. 38
Storage Paths Tab .................................................................................................................................... 39
Sharing Configuration Files......................................................................................................................... 40
Vista Examiner Support ............................................................................................................................... 40
Disabling Microsoft Windows Vista User Account Control ............................................................. 41
Running a 32‐bit Application on a 64‐bit Platform .................................................................................. 43
CHAPTER 4 Using LinEn
45
Introduction................................................................................................................................................... 46
Viewing the License for LinEn.................................................................................................................... 46
Creating a LinEn Boot Disc.......................................................................................................................... 47
Configuring Your Linux Distribution ........................................................................................................ 48
Obtaining a Linux Distribution ............................................................................................................. 48