Reliable acquisition of evidence
With EnCase Forensic, examiners can be confident the integrity of the evidence will not be compromised. All evidence captured with EnCase Forensic is stored in the court-accepted EnCase evidence file formats.

Deep forensic analysis
EnCase Forensic has been used in thousands of court cases and is known for its ability to uncover evidence that may go unnoticed if analyzed with other solutions

Mobile collection for 27,000+ profiles
EnCase Forensic supports the latest smartphones and tablets, including more than 27,000 mobile device profiles, all while empowering the examiner to conduct logical and physical
acquisitions. From the new investigator to the seasoned examiner, each level of user can find the evidence they need with mobile acquisitions in EnCase Forensic.

Image analysis
Media Analyzer processes images into 12 categories using AI powered visual threat intelligence technology. Examiners can quickly filter by confidence level and identify previously unidentified contraband with near-zero false positives.

Broad OS/decryption support
Offering the broadest support of operating and file systems, artifacts and encryption types, EnCase Forensic enables the investigator to provide conclusive results with a detailed analysis of findings.

Connect to the cloud
With EnCase Forensic, examiners can leverage credentials to collect from data repositories in the cloud, such as Microsoft O365 and SharePoint. Data is stored in logical containers to preserve chain of custody at the point of acquisition.