Скриншоты EnCase® Field Intelligence Model

Preliminary Snapshot details

Snapshot results of open ports

Snapshot results of running processes including hidden processes

PSnapshot results of all system DLL files, including injected DLL indentification

Snapshot results of open files

You have absolute control over investigator role permissions with FIM