cancel
Showing results for 
Search instead for 
Did you mean: 
gifkoek
Level 9
Report Inappropriate Content
Message 1 of 13

Using Encase with McAfee EEPC?

Jump to solution

Hallo folks,

does anyone have any experience with using Encase's Forensics suite with McAfee EEPC? A client's forensics department would like the ability to deal with encrypted drives.

We're running EEPC v6 patch 2, Encase is version 6.18 I believe. The client also has the Encase EDS license, which I believe should allow investigation of encrypted drives. At present the Encase user gets an error to the effect that the Safeboot DLL isn't available.

A quick overview of the Encase website reveals very little information, other than that Safeboot is supported (no mention of McAfee EEPC).

Any suggestions?

regards

corne

1 Solution

Accepted Solutions
Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 2 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

At the moment, Encase does not support EEPC6. It supports EEPC5 only.

12 Replies
Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 2 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

At the moment, Encase does not support EEPC6. It supports EEPC5 only.

McAfee Employee kthomas
McAfee Employee
Report Inappropriate Content
Message 3 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Hi Corne

Although I found a KB for EEPC 5.x in our McAfee Knowledgebase, I did not  find one for EEPC 6.0.

To create an accurate KB for EEPC 6, it would be helpful to know the full error the ENCASE software generated.

Just for reference the EEPC 5.x article is KB52103

All the best. Hope you can help me document this to help others in the future.

Kevin

Knowledge Analyst (Global Online Services)

KnowledgeBase: http://mysupport.mcafee.com

Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 4 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

It's not so much that there's an error Kevin, it's that you can't use Encase to do a forensic analysis on an EEPC 6 encrypted hard disk - there's just no "button" in Encase to do that, unlike v5 where there is one. 

Message was edited by: SafeBoot on 3/17/11 8:52:19 AM EDT
McAfee Employee kthomas
McAfee Employee
Report Inappropriate Content
Message 5 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Hi Simon

I did appreciate that, but it is always good to mention errors that people might search on. The KB will be updated to state exactly what you have provided.

I am just a stickler for including any errors people see when using our McAfee software.

As always Simon, thanks for keeping me busy with new content.

Kev

Highlighted
McAfee Employee kthomas
McAfee Employee
Report Inappropriate Content
Message 6 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Endpoint Encryption for PC 6.x has now been added to KB52103 to cover which versions are supported and which are not.

Thanks for your postings

Kev

Message was edited by: kthomas on 18/03/11 06:35:55 CDT
tex
Level 7
Report Inappropriate Content
Message 7 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

Are there any plans to add EnCase support for EEPC 6.x?  We were planning to rollout MEE 6.x to all of our laptops, but can't if EnCase is not supported.

Thanks.

Message was edited by: tex on 4/4/11 8:34:10 AM CDT
Reliable Contributor SafeBoot
Reliable Contributor
Report Inappropriate Content
Message 8 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

It's really a question you need to ask of Guidence Software - McAfee can't "add support" to Encase, it's not our product.

Dvanmeter
Level 10
Report Inappropriate Content
Message 9 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

gifkoek, did you find out anything from encase.  We also use encase and in many situtations we will use the EEPC 5.x module to get back data or do a forensic investigation on an encrypted machine.  Was hoping that had something by now for the newer version.

dwebb
Level 12
Report Inappropriate Content
Message 10 of 13

Re: Using Encase with McAfee EEPC?

Jump to solution

We are working with guidance right nOw to deliver encase support in 6.1 patch 2.

Hth

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.