Did you know you can use a single instance of EnCase® to
queue jobs from different cases?
In previous versions, it was possible to process multiple
cases simultaneously using multiple sessions of EnCase. Even though the
licensing allowed for this, the processing itself would have had to rely on
shared resources.
Since the introduction of the Processor Manager, using
multiple instances of EnCase for evidence processing is no longer possible, as
the Processor Manager only allows for one local processing node. If you try to
open a secondary instance of EnCase and its Evidence Processor, you’ll receive
an error message like this:
If you have not configured any remote nodes for distributed
processing, you can still use your main forensic workstation to process
different cases serially on your local workstation. This equates to a much
better use of your available resources and allows the examiner to queue various
jobs so that they run without user intervention.
After configuring jobs to run via the Evidence Processor
options window, they will appear in the View à
Processor Manager screen, allowing you to set your preferred sequence of
processing. You can find more details in the latest EnCase User Guide in the
chapter called Processing Evidence.
Jasper Rowe is a
Senior Technical Services Engineer at Guidance Software.
No comments :
Post a Comment