Summary
|
Name |
Encase Image File/Expert Witness Compression File |
Version |
|
Other names |
|
Identifiers |
MIME:
application/encase PUID:
fmt/803
|
Family |
|
Classification |
|
Disclosure |
|
Description |
Expert Witness was the original name for EnCase, as such this format can be referred to as either Expert Witness Compression Format or Encase Image File Format.
The format is used to store media images for forensic purposes. They are a type of disk image containing the contents and structure of an entire data storage device, disk volume or even a computer's physical memory. This format creates segments which have different file extensions, the first will have the extension '.e01'. this increases first numerically upto '.e99' the next extension will be '.eaa' increasing to an estimated limit of '.zzz'. |
Orientation |
|
Byte order |
|
Related file formats |
Has priority over ISO 9660 Disk Image File
|
Technical Environment |
|
Released |
|
Supported until |
|
Format Risk |
|
Developed by |
None.
|
Supported by |
None.
|
Source |
Digital Preservation Department / The National Archives
|
Source date |
27 Nov 2015 |
Source description |
|
Last updated |
09 May 2023 |
Note |
|