Encase 4.2 read

Jose Bredariol
Jose Bredariol used Ask the Experts™
on
How long Encase 4.2 will spend to read 500Gb HD ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Exec Consultant
Distinguished Expert 2018
Commented:
Pretty to tough to estimate just as it is, but the below has benchmark information which may want to further infer and extrapolate the performance. There are factor on configuration and the machine running encase appl itself

"EnCase Processor Hardware and Configuration Recommendations"
> Device size is not the primary factor that affects the time it takes to process an evidence file; the main factor is the number and type of entries. Running the modules in their default configurations did not have a large impact on the overall processing time. However, modifying these settings can have a large effect on performance.


(see pg 6) on the performance table summarised based on the configuration set
http://www.dataexpert.nl/files/downloads/EnCase%20Processor%20Hardware%20and%20Configuration%20Recommendations.pdf

"Quantifying Hardware Selection in an EnCase v7 Environment"
> Based on analysing disk images (created with Tableau Imager) consisted of approximately 240 GB of uncompressed (DD) data and 60GB of compressed (E01) data.
> Using Windows Perfmon, an analysis of the disk activity indicated that both the O/S and NSRL KFF Database channels, as well as the Evidence and Case channels, could be combined with negligible performance impact.

(check out pg 16 onwrds on the stats)
http://www.digitalintelligence.com/files/EnCase7_Recommendations.pdf

Author

Commented:
Thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial