EnCase data recovery from several software products for forensic, cyber security, security analytics and e-discovery is now easy with EnCase Data Recovery software. Software has been smartly designed for Windows platforms to support complete suite of digital investigation products, and to recover maximum possible data in their original form. Via this software, users can easily perform EnCase data recovery from EWF file, be it a hard disk image or image of any particular file. Convert to Raw and Parse as Disk are two useful features in this tool which make EnCase data recovery easy and highly effective. It supports all popular file systems of Windows, Mac and Linux systems, i.e. EXTX, FAT16, FAT32, FAT64, NTFS and HFS+. Also, it supports both partition tables, i.e. MBR (master boot record) and GPT (GUID partition table).
Demo Limitations - Trial version enable users to take preview of the recovered data.
EnCase Data Recovery
Software is extremely capable to recover lost or deleted data of forensic, cyber security, security analytics and e-discovery investigation products. It allows users to select EWF file of hard disk as well as a particular file of any format.
The auto-detect feature of this software detects the information of selected EWF file right after you select it. All the items and their values are shown in a tabular form. You can check them before you can move forward.
Convert to Raw
Convert to Raw option allows users to extract the data from the selected EWF file, be it a hard disk image or any other particular file, in the original form. Just define a location, give a name to the file and save it. After that, you click Extract button to extract the data.
Parse as Disk
Parse as Disk option to scan the EWF file of hard disk. To use this feature, you must choose hard disk image, and then you can scan the file and recover your data from it. This option doesn't work with the EWF file of a particular file.
Dual Scanning Modes
There are two scanning modes for scanning EWF file of hard disk: Standard mode for handling minor level of corruption, and Advanced mode for handling severe corruption. With advanced mode, you can define custom settings of the hard disk before start scanning process.
Multiple Recovery Modes
Both the two popular partition table formats, i.e. MBR aka master boot record and GPT aka GUID (Globally Unique Identifiers) partition table. MBR format is selected by default. If the partition table format is GPT, you need to define it before scanning the SWF file.
Partition Table Support
Software enables users to customize the volume settings, such as: starting and ending sectors. Also, users can select the file system in which they want to treat the selected volume. RAW recover mode is available in this option.
File Systems Support
All the popular file systems of Windows, Mac and Linux systems are supported by this software. The supported file systems include FAT, FAT16, FAT32, FAT64 (exFAT) & NTFS of Windows; HFS & HFS+ of Mac; and EXTX (EXT, EXT2, EXT3 & EXT4) of Linux.
Volume Custom Setting
Software enables users to define the custom settings for selected volume. The custom settings include start sector and end sector of the selected volume. Also, users can define the file system as how they want to treat the selected volume as.
Custom Volume Addition
With advance scanning mode, users are allowed to add a new custom volume to the list if any volume is missing from the disk. Click Add Custom Volume button, and a new volume will be added to the list. You can, then, define the custom settings of this new volume.
RAW Recovery Mode
The RAW recovery mode enables users to recover their maximum possible data from the selected volume. It supports recovery of image (5MB), archive (1GB) and audio (6MB) files by default. Users can recover other types of as well from the volume with the help of Add New Signatures feature.
New Signatures Addition
Users are allowed to add new signatures into a file or the existing file in order to recover more file types other than images, archives and audios. Just click Add new signatures in new/existing file button, define the file settings, and then save them. Now upload this new file and reparse the volume.
Preview of recovered data is shown in a tree-structure mode. All the files and folders will be listed in an order. Users need to expand the folders one by one to check the recovered files. Also, users can check the file properties before saving them.
Auto-search feature can search your specific files in the tree-structure within a single mouse click. Just enter the file names or types in the search box and click Search button. You can enter multiple files at a time to search them in tree-structure.
Any technical or non-technical user can use this software with ease as it doesn't require any prior technical expertise. It contains an interactive and self-instructive user interface, so that even a complete novice user can use this software.
Being a Windows system utility, this software smoothly runs under all major Windows-based operating systems, such as: Win 98, Win NT, Win 2000, Win 2003, Win XP, Win Vista, Win 7, Win 8 including the latest Win 10 (32 & 64-bits).
|Product Features||Free Version||Full Version|
|Auto-detect the EWF (EnCase image file format) file information|
|Parse as Disk option for parsing/scanning the EWF file as a hard disk|
|Extensive file systems support of Windows (FAT & NTFS), Mac (HFS+) and Linux (EXTX)|
|Powerful RAW recovery mode is available in Treat file system as option|
|Save Recovered Data||Only Preview|
|24*7 Tech Support & secure 100%|
Specifications of EnCase Data Recovery Software
There are two different options in this software: Convert to Raw and Parse as Disk. As this tool supports recovery from EWF file, be it a hard disk image or any particular file image, you can select any of these options to perform EnCase data recovery
EnCase Data Recovery software supports all popular file systems of Windows which are FAT, FAT16, FAT32, FAT64 (exFAT) & NTFS; Mac which are HFS & HFS+; and Linux systems which are EXTX (EXT, EXT2, EXT3 & EXT4).
My hard disk drive contains GPT partition table format. Can I use this software to recover my EnCase data?
Yes, you can use this software to recover your EnCase data from your hard disk drive containing any partition table format, be it MBR (master boot record) or GPT (GUID partition table). As your hard drive contains GPT partition table format, you need to check GPT format box while choosing the scanning mode. If the hard disk drive contains MBR partition table format, no need to check any box as MBR format is selected by default.
No problem if you are complete novice user having less or no prior technical expertise. This software is an easy-to-use application that contains an interactive and self-instructive user-interface. For better working experience, you can take help of online screenshots and video tutorial.