Explaining the EnCase EnScript Workflow to Customers#

Teams that already use OpenText EnCase can keep their acquisition and validation process while sending selected evidence entries into an unJaena AI case. The workflow does not replace EnCase. It helps reviewers continue into evidence search, timeline review, AI Q&A, and reporting from the selected items.

What Should Be Public#

Customers need to know the operational flow: which evidence is selected, which case receives it, and where the uploaded items can be reviewed. They do not need server headers, internal validation details, internal upload structure, parser priority, or private prompt behavior.

A safe public explanation is:

• Selected EnCase entries and metadata are sent through an authenticated collection session.
• Uploaded entries become reviewable in AI analysis, manual review, timeline, and report surfaces.
• Original acquisition, hash validation, and evidence handling remain governed by EnCase and the examiner's standard process.

Operational Checks#

In practice, success is not just “the upload completed.” The reviewer should confirm that selected entries arrived in a form that can be searched and cited. Entry count, file name, original path, hash, modified time, case mapping, and upload status all matter.

A customer checklist can stay simple:

1. Select only the required evidence entries in EnCase.
2. Confirm the target unJaena case and collection session.
3. Search the uploaded files by name, time range, or hash in AI analysis.
4. Cross-check the same evidence in manual review and timeline views.
5. Confirm that the evidence context is strong enough for reporting.

Why It Matters for AI Analysis#

Once EnCase-selected evidence is part of a case, users can continue with natural-language questions such as “find execution traces for this item,” “check nearby external connections or USB activity,” or “summarize this for a report with evidence references.”

The quality bar is evidence-first. The AI should not only produce a conclusion; it should connect the selected evidence with surrounding artifacts so the reviewer can inspect and verify the result.