Guidance Software Inc.'s EnCase Enterprise Edition Version 4.16 provides the first enterprise solution that allows computer incident response teams (CIRT) and information investigators the ability to remotely perform rapid and thorough computer forensic analysis of both volatile and static data on potentially compromised servers and workstations anywhere on the network, without disrupting operations. With volatile data reporting now provided by System Snapshot (Snapshot), EnCase Enterprise Edition (EEE) provides an immediate response tool for intrusions and security alerts, capturing volatile data from systems, which is a critical component of the incident management and response process. "Volatile data" refers to information such as running applications on a particular system, open ports and files, the live Windows registry and other data in RAM. Additionally to further support incident response and forensics, EEE 4.16 has automated scripts to help investigators conduct analysis of log files.
