skip navigation

CrimeSolutions.gov

Add your conference to our Justice Events calendar

PUBLICATIONS

Register for Latest Research

Stay Informed
Register with NCJRS to receive NCJRS's biweekly e-newsletter JUSTINFO and additional periodic emails from NCJRS and the NCJRS federal sponsors that highlight the latest research published or sponsored by the Office of Justice Programs.

NCJRS Abstract

The document referenced below is part of the NCJRS Library collection. To conduct further searches of the collection, visit the NCJRS Abstracts Database. See the Obtain Documents page for direction on how to access resources online, via mail, through interlibrary loans, or in a local library.

 
  NCJ Number: NCJ 235734     Find in a Library
  Title: EnCaseĀ® Portable Evaluation Report
  Document URL: PDF 
  Corporate Author: NIJ Criminal Justice Electronic Crime Technology Ctr of Excellence
United States of America
  Date Published: 08/2011
  Page Count: 23
  Annotation: This report presents evaluation and testing results for the EnCase Portable 2.2, which can be configured to automatically search a targeted computer and collect data, including documents, Internet history and artifacts, images, and other digital evidence.
  Abstract: Encase Portable is a pocket-sized USB data-collection and triage solution that leverages the capabilities of EnCase. Unlike other solutions, Encase Portable can be used by non-experts, enabling scarce specialist resources to focus on case management, processing, detailed analysis, and reporting. The testing determined that EnCase Portable performed as expected and advertised, with the exception of its incorrectly identifying phone numbers in one of the tests. In another test, it was determined that the actions of booting a machine, logging onto the operating system, inserting the EnCase Portable USB stick, and executing the program resulted in some changes to files on the computer. Analysis of these changes determined that the files that were altered or added as a result of this test were operating-system and application files, not user data. In order to prepare for testing and evaluation of EnCase Portable, staff designed and configured a test bed that simulated realistic conditions. Having knowledge of what “evidence” exists on the test bed enables easy evaluation of EnCase Portable. The testing of EnCase Portable was performed in three phases. Each phase is described in detail. 3 tables and 2 figures
  Main Term(s): Computer related crime
  Index Term(s): Testing and measurement ; Computer related crime ; Investigative techniques ; Computer evidence
  Sale Source: NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America

National Law Enforcement and Corrections Technology Center (NLECTC)
700 N. Frederick Ave.
Bldg. 181, Room 1L30
Gaithersburg, MD 20879
United States of America
  Type: Test/Measurement
  Country: United States of America
  Language: English
   
  To cite this abstract, use the following link:
https://www.ncjrs.gov/App/Publications/abstract.aspx?ID=257721

*A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's website is provided. Tell us how you use the NCJRS Library and Abstracts Database - send us your feedback.