Has your agency upg...
 
Notifications
Clear all

Has your agency upgraded to EnCase V7?

31 Posts
25 Users
0 Likes
2,087 Views
(@mansiu)
Posts: 83
Trusted Member
Topic starter
 

EnCase version 7 has been released for 6 months, Have your agency upgraded to EnCase V7?

We will have EnCase training soon and we found that EnCase training are version 7 now.

 
Posted : 04/01/2012 12:40 pm
(@jonathan)
Posts: 878
Prominent Member
 

✓ No, and am not planning to either.

 
Posted : 04/01/2012 5:25 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Jonathan,

Can you elaborate on why that is?

Thanks.

 
Posted : 04/01/2012 6:39 pm
(@yogeshkhatri)
Posts: 26
Eminent Member
 

I have v7 but still continue to use v6 for most stuff. Two reasons

1. They took out some very useful features like being able to see all mounted items in evidence in one single flat view (greenplate in encase terminology). v7 will only allow you to view one archive at a time! So that means that for your case involving 200 zip archives of jpg files, you can sure load em up at 1 click with a script, but painfully load and view one archive at a time once its mounted!

2. Most of what i do (artifact parsing) is automated with scripts, which I havent ported over to v7 and am actually seriously thinking about porting them to windows and releasing all of them as open source scripts.

Eventually there will be enough new features compelling us to move over to v7, but for now v6 is good enough.

 
Posted : 04/01/2012 7:48 pm
(@rhouse)
Posts: 7
Active Member
 

After seeing all the issues that people where having with v7 we decided to not upgrade.

 
Posted : 04/01/2012 8:01 pm
(@angrybadger)
Posts: 164
Estimable Member
 

not yet.
will do once its out of beta.

wink

 
Posted : 04/01/2012 8:23 pm
(@pragmatopian)
Posts: 154
Estimable Member
 

I had a look at the early beta versions hated the interface changes, and couldn't see enough merit in the other new features or improvements to justify the upgrade cost.

I'll get a current evaluation version to see if matters have changed since then.

 
Posted : 04/01/2012 10:43 pm
(@ulsterman)
Posts: 4
New Member
 

After attempting to use EnCase v7 several times, I have come to the opinion that it is a disaster. Horrible GUI, poor functionality and unstable.

My organisation spent several thousand pounds upgrading to this version only to feel we entered into a de facto Beta testing program.

After using EnCase as our primary tool since V2, we will now be resorting to FTK and X-Ways Forensics, mainly because they work.

RIP Guidance Software.

 
Posted : 05/01/2012 2:40 am
(@sfgairborne)
Posts: 4
New Member
 

We got an evaluation copy…and we all hate it. Can't find Sweep Case, or Case Processor. The interface is terrible. Useful features are gone. Even the features that remain aren't working properly. We're trying to convince our employer to send us for EnCase training for V7, in case we're somehow missing something…but who knows? My agency uses V5, and I have a copy of V6.18 personally…they are both great. I hate 7.

 
Posted : 05/01/2012 2:42 am
(@jonathan)
Posts: 878
Prominent Member
 

Jonathan,

Can you elaborate on why that is?

Thanks.

Various reasons, primarily that it's just leagues behind X-Ways Forensics in almost any way you choose to look at it. Also EnCase 7 is just not ready, is it? If you're sticking with the Guidance route that leaves you with EnCase 6, which is fine, especially if you have some decent EnScripts to run on it. But hold on - it's now a legacy product as Guidance have put it out to pasture. A case could perhaps be made that if you've alternatives to hand it would be negligent to currently use EnCase 6 or 7.

 
Posted : 05/01/2012 4:12 pm
Page 1 / 4
Share: