Evidence file format created by EnCase Forensic, an application used to collect, process, analyze, and report forensics information; contains sensitive digital forensics, cyber security, and e-discovery information; includes case information such as the examiner's name, date and time of acquisition, and notes on the acquisition.

EX01 files are used in judicial environments to preserve and present digital evidence. The EX01 file is an exact copy of the contents extracted from a subject device's disk and can be mounted and read by EnCase Forensic or another program that supports the EX01 format. The EX01 format replaced the .E01 format with the release of Encase 7. The new format provides advanced security features such as AES256 encryption with keypairs or passwords, LZ compression, and the option for MD5 or SHA-1 hashing.