EnCase forensic service tools

Abstract

Computer or digital forensics is defined as a process of acquisition, memorizing, analysis, and presentation of digital evidence in the nature of digital data which can confirm that crime was committed and also establish connection between the criminal act and its perpetrator. Digital forensics uses hardware and software service tools and scientific methods for detecting digital data, their identification, evaluation, extracting, recovering, and analysis. Digital forensics is a new field of science with growing interest in this subject matter, resulting in the fact that now, in USA only, there are a dozen universities providing specific education in this field. This paper presents one of the most popular forensic service tools, named EnCase (from Guidance Software), which is widely used and accepted in jurisprudence of USA and EU.

Kompjuterska ili digitalna forenzika se definiše kao proces prikupljanja, očuvanja, analize i prezentovanja digitalnih do kaza, koji su digitalni podaci i koji mogu potvrditi da li je počinjeno kriminalno delo, kao i vezu između kriminala i počinioca. Koristi forenzičke hardware i software alate, kao i naučne metode za otkrivanje, identifikaciju, validaciju, izvlačenje, oporavak i analizu digitalnih podataka. Novo je polje nauke a zainteresovanost za problematiku kojom se bavi ogleda se u činjenici da trenutno postoji više desetina koledža i univerziteta koji samo u Americi obavljaju edukaciju u ovoj naučnoj disciplini. Ovaj rad se bavi jednim od forenzičkih alata, EnCase firme Guidance, koji predstavlja standard u sudskoj praksi SAD i zemljama EU.