Guidance has the "Portable" now. If you have a non-technical user in a remote area, which you have limited band width issues, (otherwise you could simply do this with Enterprise or eDiscovery), you can simply create a job, load it to Portable, and send the Portable device along with a storage drive to the user. A job might be a full image of a computer's hard drive, or it might be set up to collect Word docs only. Source Processor is the magic behind this one.
The user can plug portable into a running Windows machine and simply run the preset collection criteria, or Portable can be used as a bootable thumb drive device, (we have a boot CD too). This allows an operating system to boot and the collection jobs to display in a GIU. No OS concerns. It makes it easy to collect.
The user simply plugs in Portable, plugs in a storage drive, then clicks on a predefined job. It can be a full disk image of all the drives, or the collection of specific items. We were at the High Tech Crime Investigator's conference doing demos.
Labels: EnCase Portable
<< Home