EnCase Forensic v4

[Forensicx1]

Hey,

I was wondering if anyone has the .PDF manual for EnCase Forensic v4.19 ( or any 4+ version ). I have been searching EVERYWHERE for this. I do not need the program, just the manual.

Thanks in advance,

Kev

[gore]

It didn't come with one when you bought it?

[Forensicx1]

I use the demo version because the retail version is 3k.

My school computer lab has the licensed version. I have checked with the website and they say you need to actually purchase the program to get the user manual and since the lab monitors at my school are idiots, they have lost all traces of logins/passwords/etc with this program.

I would just like to get this .PDF manual, print it out at like a kinko's and heavily research this program because it's extremely interesting.

Theres tons of places online (*****peer etc) to download the v3 manual but I need v4.

Can anyone help me with this?

Thanks,

kev

[Cybr1d]

hmm....interesting points since the program costs $1,299 for single user and $1,999 for a corporate edition. Its currently being used in various Network Forensics Courses, but I highly doubt that they give you a copy of it. You can download a demo of it from their website.

I'm sorry but I was incorrect with the prices:

MSRP: Corporate: $2,495.00 | Government/Education: $1,995.00
To order EnCase Forensic Edition V4, contact Guidance Software at: • Purchase Online
• Phone: 626.229.9191
• Download Order Form (37K)
• Email: sales@guidancesoftware.com
• For International orders: See Sales and Purchases


Try e-mailing them for it.

Exellent piece of software though...I'm dying to get my hands on a full version, but dont have the money right now to invest into it:

FULLY INTEGRATED FORENSIC INVESTIGATION SOLUTION:
• EnCase® was developed based on law enforcement specifications and requirements
• High throughput acquisitions of suspect media
• Robust search and analytical tools
• Powerful data capture and documentation features
• Manage multiple cases simultaneously
• Flexible reporting features
• EnCase® EFS Decryption Module (requires a separate EnCase® EFS Certificate to be purchased)

SUPPORTS BROAD RANGE OF PLATFORMS AND FILE SYSTEMS:
• Windows 95/98/NT/2000/XP/2003 Server, Linux, Unix, BSD, DOS, PALM OS, Macintosh
• NTFS, FAT 12/16/32, EXT 2/3, UFS, FFS, Reiser, CDFS, UDF, JOLIET, ISO9660, HFS, HFST

POWERFUL SCRIPTING FOR CASE AUTOMATION:
• EnScript™ Macro Language for automating EnCase® functions
• Numerous scripts available for specific investigation needs including Case Initialization, Web Carver, eMail Carver, Credit Card/SSN Finder
• Build custom scripts for special investigative needs and to automate tasks

INDUSTRY VALIDATED SOLUTION:
• Trial and Appellate Court Decisions
• NIST Verification
• Used Worldwide by Law Enforcement

[Forensicx1]

Yes..extremely costly.

Our class can log onto the lab computers via VPN 24/7 and use the Licensed version pretty much like its on my own desktop so I'm not so quick to buying it.

Also, a lot of companies will either already have it or pay for it once they hire you. ( as well as the additional 3k training that encase.com offers for that program ).

I just wanted the manual to read in my spare time and perfect my knowledge of this...

Anyone?

[Cybr1d]

some manuals found here:

http://www.guidancesoftware.com/support/downloads.shtm

www.guidancesoftware.com/products/ downloads/EFETransitionGuide.pdf

V4 is not very different from v3...start off by reading its earlier editions and see what you can learn from them and understand the changes more effectively.

[11001001]

Originally posted here by Cybr1d
V4 is not very different from v3...

Actually, Cybr1d, it is pretty different.
The biggest change is the process by which new evidence is acquired.
There are many other smaller new features, as well.
Also, the user interface is pretty different if you're used to version 3.
I had a good knowledge of version 3, and was almost totally lost when we got 4.18.

[Cybr1d]

Actually, Cybr1d, it is pretty different.
The biggest change is the process by which new evidence is acquired.
There are many other smaller new features, as well.
Also, the user interface is pretty different if you're used to version 3.
I had a good knowledge of version 3, and was almost totally lost when we got 4.18.


__________________

Sweet, THnx for clarifying it