| | EnCase FIM, for law enforcement and consultants performing external investigations, provides all of the analytics of EnCase Forensic plus the ability to run in stand alone or network connectivity modes. The investigator can perform RAM analysis through the SnapShot module or through the included RAM collection utility called LinEn. The collected RAM data can then be ported into the HBGary Responder products. Investigators performing investigation on their own internal networks would require EnCase Enterprise.
|