EnCase Decryption Suite

EnCase Decryption Suite (EDS) in previous versions of Encase was an extra-cost module; however, with EnCase 7, EDS is integrated into the program at no extra charge. EDS has grown and evolved with the growth of encryption schemes and products. The help screen in EnCase, shown in Figure 10-51, shows quite vividly the depth of complexity and support offered with this feature. Currently (version 7.04), EDS supports the following forms of encryption:

  • Disk and volume encryption
    • Microsoft BitLocker
    • GuardianEdge Encryption Plus/Encryption Anywhere/Hard Disk Encryption
    • Utimaco Safeguard Easy
    • McAfee SafeBoot
    • WinMagic SecureDoc Full Disk Encryption
    • PGP Whole Disk Encryption
    • Checkpoint FDE (Full Disk Encryption)
  • File-based ...

Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.