Knowledgebase: E3
Guidelines for Upgrading Paraben’s P2C to E3:P2C
Posted by Jack H. Ward, Last modified by Jack H. Ward on 14 November 2016 03:26 PM

About Electronic Evidence Examiner E3:P2C

Electronic Evidence Examiner is a comprehensive analysis tool combining plug-ins for computer forensic and mobile forensic analysis. You can purchase either a full version of Electronic Evidence Examiner (E3:Universal) or only its specific components (for example, for working with computer data (E3:P2C), or mobile data (E3:DS), or email databases (E3:EMX or E3:NEMX), etc.). These components are referred to as packages.

E3:P2C is an Electronic Evidence Examiner package which allows you to work with all types of data supported by Paraben’s P2C, and includes a number of new features intended to make your investigations more convenient.

E3:P2C allows you to examine disk drives, images, and other data such as:

  • Mailstorages
  • Network mailstorages
  • Chat databases
  • Archive compressed files
  • Windows registry
  • SQLite databases
  • OLE storages
  • Internet browser data
  • Forensic containers
  • E3 mobile data case files/DS case files
  • iPhone/iPad/iPod Touch backup files
  • Memory dumps
  • Xbox files

Just like Paraben’s P2C, E3:P2C allows you to sort files into categories, preview files, view text and hex information, and hash the files using MD5 to ensure that they have not been changed or corrupted. You can use E3:P2C to analyze all data on a computer hard drive including deleted data.

This document describes how to upgrade your P2C application to E3:P2C.

New Features for P2C Users

  • A completely new interface designed to expedite navigation around the case.
  • A new type of licensing – Internet License allowing you to use your Electronic Evidence Examiner packages on multiple machines.
  • New Tutorial – a quick guide for first-time users.
  • The ability to change the data time zone for viewing evidence directly from the ribbon.
  • The ability to validate opened E3 mobile data cases.
  • New reports for E3 mobile data evidence.
  • Reports customization:
    • Custom logo, header and footer
    • Examination Summary and Examination Conclusion sections
  • The Open With feature for viewing binary files in external viewers.

Upgrading Paraben’s P2C to E3:P2C

If you have P2C with a valid subscription, it is recommended that you upgrade your P2C to E3:P2C to get access to all the new features offered for P2C users.

The upgrading process consists of the following steps:

  1. Sending an upgrade request to Paraben’s Support Center at forensics@paraben.com
  2. Uninstallation of P2C 3. Installation of Electronic Evidence Examiner (E3) 4. Activation of the E3:P2C package

To request a P2C to E3:P2C upgrade:

  1. E-mail Paraben’s Support Center (forensics@paraben.com) with a request to upgrade from P2C to E3:P2C. Specify the following information:
    • Your Paraben account ID or dongle number.
    • Your current activation type (dongle or license key).
    • Please note that you can also request to change your activation type to Internet license to get the ability to use your E3:P2C on multiple machines without having to use the dongle. If you are running a VM, only the Internet license or Dongle options are available.
  2. Once you get an upgrade confirmation from Paraben’s Support Center, you can uninstall P2C and start the Electronic Evidence Examiner (E3) installation.

Installing Electronic Evidence Examiner

To install Electronic Evidence Examiner:

  1. Download the Electronic Evidence Examiner installation file from http://download.paraben.com/.
  2. Run the Electronic Evidence Examiner installation file.
  3. The Paraben’s Electronic Evidence Examiner Installation wizard opens. On the Welcome page, click Next.
  4. Read the License Agreement carefully and select I accept the terms of License Agreement if you accept the terms. Click Next.
  5. Select the Installation folder and click Next.
  6. If you are ready to begin the installation, click Install.
  7. The installation process starts. It may take some time.
  8. When the installation process finishes, the last page of the Installation wizard is displayed. Clear the Open the Electronic Evidence Examiner Driver Pack download page checkbox (as it is required to select only for E3 packages which work with mobile device acquisition). Click Finish to exit the wizard.
  9. Electronic Evidence Examiner is installed and you can now activate your package.

Activating E3:P2C Package

To activate your E3:P2C package with a dongle:

  1. Plug the dongle into your computer, start Dongle Manager and update the dongle.
    Please note: if you cannot find Dongle Manager on your machine, download it from http://download.paraben.com and install it.
  2. Install Dongle Manager on the computers where Electronic Evidence Examiner (E3) will be used. 3. Plug in the dongle and start Electronic Evidence Examiner.

To activate your E3:P2C package with a license key over the Internet:

  1. Start your Electronic Evidence Examiner and click Activate in the dialog displayed on start.
  2. In the Activation wizard, select Direct Machine License and click Activate.
  3. On the next page of the wizard, select the Over the Internet activation type and click Next.
  4. On the Enter Your Product ID (PID) page, click Add and enter the Product ID you want to activate. Then click Activate. Your PID is found in your registration account located in our new Customer Zone at https://www.paraben.com/customer-zone.
  5. After the package is activated, the last page of the Activation wizard will be displayed. Click Finish to exit the wizard.
  6. Your E3:P2C package is activated and you can begin it.

To activate your E3:P2C package with a license key by telephone:

  1. Start your Electronic Evidence Examiner and click Activate in the dialog displayed on start.
  2. In the Activation wizard, select Direct Machine License and click Activate.
  3. On the next page of the wizard, select the By Telephone activation type and click Next.
  4. The Phone Activation page opens.
  5. Follow the steps described on the page: call the support center and dictate the Product ID (PID) and the Registration key displayed on the Phone Activation page.
  6. When you receive the Activation key, enter it in the corresponding field and click Activate.
  7. After the package is activated, you will see the last page of the Activation wizard.
  8. Click Finish to exit the wizard.
  9. Your E3:P2C package is activated and you can begin using it.

To activate your E3:P2C package using the Internet license:

  1. Start Electronic Evidence Examiner and click Activate in the dialog displayed on start.
  2. The Activation wizard opens.
  3. In the Activation wizard, select the Internet License option (selected by default) and click Activate.
  4. The Connect to Web License Server dialog is displayed.
  5. Enter your Paraben user login and password and click Connect.
  6. Electronic Evidence Examiner connects to the web license server. Wait while it is checking whether there are any available E3 packages assigned to your account.
  7. Your E3:P2C package becomes activated and you can begin using it.

Working with E3:P2C

The E3:P2C interface allows the most convenient navigation around the case. There are no major differences between P2C and E3:P2C in regards to adding and analyzing evidence, exporting, or generating reports.

The only major change is the format of case files created in E3:P2C. Cases created in E3:P2C have the *.e3 format as opposed to the *.p2c format of cases created in P2C.

Please note that you can work with *.p2c cases in E3:P2C. To open a *.p2c file, in the Windows Open dialog, in the File Mask field, select P2C Cases (*.p2c).

Unavailable Options

You will find some unavailable options in the E3:P2C interface. For example, Start Acquisition, Import From, or Cloud Import on the Evidence tab in the Mobile Data group. These options are available in Electronic Evidence Examiner (E3) packages that allow mobile device acquisition. If you are interested in using these options, you can purchase an E3:DS package (for mobile forensic analysis) or upgrade your package to E3:Universal (for both computer forensic and mobile forensic analysis).



Attachments 
 
 upgrading p2c to e3 p2c.pdf (1.94 MB)
(0 vote(s))
Helpful
Not helpful

Comments (0)