When it comes to forensics performed on Microsoft Windows platforms there is really only one choice in software. We need not speak its name here 
. What other solutions do you use if any? There does not seem to be a plethora of choices out there. Let alone ones that are recognized in court. That is a big issue as well that one needs to bear in mind when choosing a forensics solution. Not all forensics cases will go to court but for those that do it makes sense to ensure that your solution is known to be a solid one. Forensics is a very interesting field, and can be quite a complex one involving more then simple knowledge of the operating system.
Technorati Tags: Forensics, Encase, Microsoft Windows