OpenText Forensic

Overview
OpenText™ Forensic, historically known as EnCase Forensic is a mature enterprise grade digital forensics platform designed for defensible evidence acquisition in depth forensic analysis and court ready reporting. It is widely deployed by law enforcement agencies government regulators large enterprises and law firms due to its long history of judicial acceptance and rigorous evidence handling controls.

Core Capabilities

Evidence Acquisition:

• Performs forensically sound imaging of storage media endpoints removable devices and selected logical data.
• Supports industry standard formats such as E01 and RAW.
• Built in cryptographic hashing including MD5 SHA1 and SHA256 for integrity verification.

Acquisition workflows are designed to preserve chain of custody from collection through reporting.

Forensic Analysis:

• Provides deep analysis of file systems including deleted and partially overwritten files.
• Extracts and interprets user activity artifacts system metadata registry data and internet history.
• Supports tens of thousands of device operating system and file system profiles.
• Enables correlation of evidence across timelines file paths and user contexts.

The tool emphasizes artifact first analysis allowing investigators to prioritize probative data early. It also reduces time spent on raw file review in large datasets; particularly valuable in time sensitive investigations and large scale enterprise matters.

Automation and Extensibility
OpenText Forensic supports scripting and automated workflows that allow organizations to create repeatable and standardized forensic processes across cases teams and jurisdictions. These automation capabilities enable consistent evidence handling reduce examiner workload and minimize variability in analytical outcomes particularly in large scale or recurring investigations.

Reporting and Legal Defensibility
OpenText Forensic produces court ready customizable reports suitable for criminal civil and regulatory proceedings and is designed to align with evidentiary standards expected by courts and regulators. The platform is routinely relied upon in expert testimony and formal forensic declarations where defensibility transparency and methodological rigor are critical.

Typical Use Cases

• Criminal investigations requiring defensible digital evidence handling.
• Corporate incident response and internal investigations.
• Civil litigation and eDiscovery support where forensic rigor is contested.
• Regulatory and compliance investigations involving sensitive or high stakes data.

Who This Tool Is Best For

• Digital forensic laboratories.
• Law enforcement and government agencies.
• Corporate DFIR teams.
• Law firms and expert witnesses handling technically complex matters.