OpenText EnCase eDiscovery Reviews

We have experience in engineering and capital projects. It is an add-on to extend project and asset management documentation.

The solution offers a full tech search and a unique user experience. Also, it is extended within traditional artificial intelligence.

The solution could improve productivity.

I have been using OpenText EnCase eDiscovery since 1998. We are using the latest version of the solution.

The product is stable. OpenText has been deploying this application for a long time. The application has a long experience in the market. You need to configure it in the right way to work correctly.

The solution is scalable. It has three levels. You have the presentation area that can be escalated to the balance sheet. You have the back-end area that can be escalated using higher viability to configure more application servers. Also, the area of storage can be increased.

We usually cater to enterprise solutions but have small- and medium-sized customers. It starts with 25 users and goes up to 100s and 1000s.

The initial setup is easy. It depends on the solution. Different solutions are already in use. You need to configure user access and define the structure of the company's application. It can take one week to three months, depending on the complexity of the application.

I rate the initial setup a nine out of ten, where one is difficult, and ten is easy.

I rate the product’s pricing a five out of ten, where one is cheap and ten is expensive.

Overall, I rate the solution a nine out of ten.

My primary use case for this solution is as a forensic tool that is taking an image, extracting the data and then analyzing the keyword search. Currently working on Endpoint Security Encase SAFE for monitoring the nodes / machines.

Using Encase we are able to implement security and also Forensics.

Pathways, SweepEnterprise and EnScripts. In near future eventually go for EnCase mobiles.These provide maximum ease to work as per work and situation.In the scenarios we have, we try to use extraction of data that would be based on extensions. We also go for an answer based on the keyword search. 

SweepEnterprise where the limit is up to 5 machines to scan. Customised Report that can be obtained as per the user requirement. Like it should omit duplicate machines, able to Filter old machines w.r.t the new one and provide New scannes machines status.We have come across problems with the end-case. We could not find an email discovery type of module and there was not flexibility with the email. So, the moment we came across a  parameter or something like that we had to either extract those extensions and then again go for another rule that can be further extracted to a readable format like Outlook. If this was included, we would find this a more useful solution.

Secondly, is getting the key word search option. If you go, there are legal options, it's like a deal for file extensions. Every time we have to repeat the process and it is repetitive. Whereas, if you can get research that can be categorized by default based only by an extensions that would be a benefit. 

Also, if we can also add the timely matched signature that it would be helpful.

One to three years.

It was quite stable for me. I have not come across bugs.

In terms of the scalability, I found that it depends upon the size and the contribution of the system that you are using. We did have some issues with adding more cases simultaneously.

We have not used tech support.

It is the same Encase using with different version. Came up with Enscript Snapshot to use in order to overcome the limit of scannig of 5 machines / nodes (SweepEnterprise) to 》200 machines. 

Waiting for new release

Suprised that opentext could not responded quickly when the client seek help in this regard i.e limitation of scanning nodes.

We have a license. And, we found the cost high. We contacted them and talked to them about the ratio of the US dollar versus the Indian rupee and then we came to a solution.

I am not sure what the client has done regarding this.

The same Snapshot EnScript is informed to Opentex where the are going to include in 8.08 release or higher version

We primarily use the solution for our data center and servers.

The artificial modeling features are the solution's most valuable aspect.

The solution is very stable.

The pricing offered is fair. It's not too expensive by any means.

Overall, the features on offer are fine and I don't see a place for improvement in that respect.

The technical support on offer needs to be improved. They're quite slow to respond to our enquiries.

The reporting is a bit unreliable. It needs to be better.

The performance needs to be a bit better than what is on offer. It's lacking a little.

I've been using the solution for about four to five years.

The solution is stable. There aren't bugs or glitches. It doesn't crash or freeze. It's reliable. I would say that it's never let us down.

We're not completely satisfied with technical support. We expect a much faster response time and we just aren't getting that. I've had a few calls with support at this point and the responses are always delayed and drawn out. From a customer service standpoint, this is unacceptable. They could be much, much better.

We find the pricing to be quite reasonable. It's not the most expensive on the market.

We're just customers. We don't have any business relationship with the solution. We just use it internally in our company.

The solution has been quite good, and, overall, the features we need are available to us. The reporting could be improved, and technical support could be more responsive, but other than that, it serves us very well.

I'd rate the solution nine out of ten.

When the open face tools are not able to do what EnCase is able to do.

EnCase helps speed up the process of investigation. It indexes much faster, and is more reflexive because of the Enscripts (scripts that create additional functionality for EnCase).

The most important feature we've found is the Enscripts. That is one powerful feature that I personally love to use. It allows me to customize the scripts and deploy it as and how I need it. For example, if I want to segregate the files for myself, indexing the files, so that using Enscripts I am able to do so.

I would like to see a capability to ingest and absorb more data. That would be really good.  It currently is lacking this function.

No, I didn't face any issues of crashes or stability. There were minor UI bugs, but nothing related to process.

Yes, it does, it does. It does work on enterprise.  I personally have not used EnCase on a server, but I would like to try that feature sometime in future.

I haven't interacted much with tech support.

I was not involved with the implementation or setup of the product.

It's a very strong player in this field already, and I see there's potential for EnCase. They're continuing in development and really keeping up with technology and demands.

EnCase is an affordable solution.

We compared it to Autopsy. We noticed that with EnCase, the indexing is much faster. 

In addition, I also use FDK and Unix. In comparison, EnCase is pretty solid, because of the lab solution compared to FDK and Autopsy. And, if the size goes beyond a certain TB, like 100 or plus, then we use Unix.

The tool improves the results of data recovery cases.

Data Recovery: Its ability to repair damaged partitions and uncover hidden partitions from within the tool, and allow further analysis.

Ease of use and learning curve need improvement.

We encountered stability issues just as one encounters with all commercially available forensic tools.

The initial setup was very straightforward.

We use many other forensics tools like AccessData FTK, Magnet Axiom, and X-Ways.

Consider this tool if you do a lot of data recovery and plan to implement EnCase Endpoint.

It speeds up the process, so I can meet my deadlines. 

At first, I was using Encase 6, thereby running recovery and processing separate.

I like the processing feature on the product because it does everything at once, i.e, indexing, recovery, keyword searches, etc.

I failed to index Microsoft Exchange Server Emails (.EDB). I think an improvement could be to support all types of email extensions and add more features on mobile data extractions (smartphones and iPhones).

There are still some challenges that we experience using the product.

Sometimes the application can take more time to complete the image processing or fail at the end of the process.

The technical support is excellent. 

I used FTK and X-Ways before moving to Encase. Encase was and still is the best product to use.

I used a different solution because my image process kept failing and moved cache files to different source.

The setup was straightforward.

The product is affordable and user-friendly.

Visit the website of Guidance Software and find out more about the product.

Image creation and image analysis in one program, basically for ease of use. All-in-one solutions tend to outperform split system solutions.

It has allowed me to teach forensics in an environment which is very much analogous to the real world.

It could be more geared towards students. I would add a full-featured student version that can be integrated into labs that the students can work with. (This can be on a monthly fee plan.)

On and off for nine years in educational surroundings. I have only used the newer version (8.5) in classes.

With 6.10, there are some issues, but these have been corrected. With 8.5, which I have used a few times, I have not seen any major issues that would be showstoppers.

The ability to upgrade was inline with other programs of this type.

Technical support is average. They perform their job well when required.

I used and still use DCFLDD and Sleuth Kit (Autopsy) as a comparison to the professional program, EnCase. I did not switch because I believe students need to know how to use alternatives as well as the professional versions of the software.

I would say straightforward, in comparison with other programs of this type. No more, no less complex.

I would tell prospective buyers to make sure that you purchase at least three licenses for professional use. This is not the program I would suggest for a newbie using to learn. It is just too expensive for the full experience, and the student versions, while very good, are just for that, students.

Yes, I did. I still use and teach with other options, because I feel that students should know about multiple systems. I have used in teaching FTK, ProDiscover, and Sleuth Kit (Autopsy).

Know how many licenses you will need starting off.

Make sure the system you are loading it on is clean. I have experienced that it (EnCase) is easier to load on a system that does not have other forensic programs on it.

Most of the features of Encase are very user-friendly. Simultaneously, we can process many search operations: Multiple sorting and regular expression search are a couple of those features.

I had been using Encase as a digital forensicator professional for over a decade. I have used this to solve many cases. It is useful for an initial assessment as well as to crack cases. It is user-friendly. Currently, I am in the education field teaching a master's degree in cyber forensics and information security. I use this tool for giving demonstrations to students, and also for them to practice with it.

I suggest that if the mobile phone acquisition is embedded in the Encase law enforcement version, it would be very useful. As of now, only a few mobile phones, especially the smart phones, have the acquisition embedded.

I have been using this tool for over a decade.

Not exactly.

Not exactly.

Perfect.

The initial setup was not complex.

It is a very useful tool. It is worth buying irrespective of price. I do suggest there should be an education license at a lower price.

I had been using both Encase and FTK.

I think any organization should have a combination of licenced tools and also open source, so they can compare our results.

It is an essential tool to have in place in any forensic lab.