cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
gifkoek
Level 9
Report Inappropriate Content
Message 1 of 13

Using Encase with McAfee EEPC?

Jump to solution

Hallo folks,

does anyone have any experience with using Encase's Forensics suite with McAfee EEPC? A client's forensics department would like the ability to deal with encrypted drives.

We're running EEPC v6 patch 2, Encase is version 6.18 I believe. The client also has the Encase EDS license, which I believe should allow investigation of encrypted drives. At present the Encase user gets an error to the effect that the Safeboot DLL isn't available.

A quick overview of the Encase website reveals very little information, other than that Safeboot is supported (no mention of McAfee EEPC).

Any suggestions?

regards

corne

1 Solution

Accepted Solutions
SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

At the moment, Encase does not support EEPC6. It supports EEPC5 only.

View solution in original post

12 Replies
SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

At the moment, Encase does not support EEPC6. It supports EEPC5 only.

View solution in original post

kthomas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Hi Corne

Although I found a KB for EEPC 5.x in our McAfee Knowledgebase, I did not  find one for EEPC 6.0.

To create an accurate KB for EEPC 6, it would be helpful to know the full error the ENCASE software generated.

Just for reference the EEPC 5.x article is KB52103

All the best. Hope you can help me document this to help others in the future.

Kevin

Knowledge Analyst (Global Online Services)

KnowledgeBase: http://mysupport.mcafee.com

SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 4 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

It's not so much that there's an error Kevin, it's that you can't use Encase to do a forensic analysis on an EEPC 6 encrypted hard disk - there's just no "button" in Encase to do that, unlike v5 where there is one. 

Message was edited by: SafeBoot on 3/17/11 8:52:19 AM EDT
kthomas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Hi Simon

I did appreciate that, but it is always good to mention errors that people might search on. The KB will be updated to state exactly what you have provided.

I am just a stickler for including any errors people see when using our McAfee software.

As always Simon, thanks for keeping me busy with new content.

Kev

kthomas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Endpoint Encryption for PC 6.x has now been added to KB52103 to cover which versions are supported and which are not.

Thanks for your postings

Kev

Message was edited by: kthomas on 18/03/11 06:35:55 CDT
tex
Level 7
Report Inappropriate Content
Message 7 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Are there any plans to add EnCase support for EEPC 6.x?  We were planning to rollout MEE 6.x to all of our laptops, but can't if EnCase is not supported.

Thanks.

Message was edited by: tex on 4/4/11 8:34:10 AM CDT
SafeBoot
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 8 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

It's really a question you need to ask of Guidence Software - McAfee can't "add support" to Encase, it's not our product.

Dvanmeter
Level 10
Report Inappropriate Content
Message 9 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

gifkoek, did you find out anything from encase.  We also use encase and in many situtations we will use the EEPC 5.x module to get back data or do a forensic investigation on an encrypted machine.  Was hoping that had something by now for the newer version.

dwebb
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 10 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

We are working with guidance right nOw to deliver encase support in 6.1 patch 2.

Hth

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community