SAN DIEGO, CALIF - Investigators in the murder trial of David Westerfield used forensics software to connect Westerfield to child pornography, using EnCase software to examine his computers and disks.
The software, made by Guidance Software, costs $2,500 and is being used by police agencies throughout the United States and abroad. The software allows law enforcement and IT professionals to conduct powerful but completely non-invasive computer forensic investigation. The software images a computer's hard drive without disturbing any of the components, since even acts such as booting up Windows can change a PC's files.
EnCase can also analyze files in PDAs, DVDs and digital camera's memory cards. It enables examiners to easily manage large volumes of computer evidence and view all relevant files, including deleted files and unallocated space.
The integrated functionality of EnCase allows the examiner to perform all functions of the computer forensic investigation process, replacing archaic, time-consuming and cost-prohibitive processes and tools. The tool was also used by French police to uncover emails from alleged "shoe-bomber" Richard C. Reid.