In April 2009 Elementary discovered several flaws in the way EnCase (or, more specifically, the EnScript scripting language and scripts included with EnCase) handled dates and times in certain specific circumstances.
While it has long been known that dates and times can be problematic for computer forensic software generally, and Guidance Software themselves were aware of some of the issues, these issues highlighted by Elementary were not widely understood in the computer forensic or legal professions. Certain of the problems were even unknown to Guidance Software.
Elementary's analysis of the problems is set out in this report.
