Glossary term
EnCase
EnCase is a computer forensics software platform owned by OpenText, used for forensic acquisition, analysis, and reporting since the late 1990s. It is one of the most widely court-recognized forensic tools.
EnCase Forensic supports forensic imaging, analysis, and reporting on Windows, macOS, and Linux source media. It is a heavyweight platform aimed at full-stack disk forensics, with strong support for evidence collections that span hundreds of devices.
The tool's longevity and law-enforcement adoption have given it strong court recognition across Canada and internationally. Findings produced by EnCase are usually accepted without methodological challenge in jurisdictions where opposing counsel is familiar with the tool.
We use EnCase as one of several primary disk-forensics platforms, alongside Magnet AXIOM and X-Ways Forensics. Tool choice on any given matter depends on the source media, the analytical question, and the format the deliverable must take.