Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Ares Registry Report

This script will find NTUSER.dat files and extract the subkey [\\Software\\Ares] into a bookmark. It will also interpret a number of known values and decrypt some values that are encrypted. Research by Matt McFadden and James Habben.

Download Now



Version: 1.1
Tested with:
EnCase Forensic 7.07
Developer: James Habben
Category: Artifact

1482 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

VSS Examiner

Quickly and easily identify and preserve data of interest in Microsoft Windows volume shadow copies.
By Simon Key
3876 Downloads
App
Artifact

SEEB USB - Mounted Devices Report

Script will create detailed Excel, CSV, console & bookmark reports on Mounted, USB, portable devices found in the registry and setupapi logs.
By Brian Jones
3646 Downloads
App
Artifact

Exif Viewer Plugin

The is a self-installing application plugin that enables the user to right-click on an Exif JPEG file in order to view and bookmark the Exif metadata that it contains.
By Simon Key
2948 Downloads
App
Artifact

Exif GPS Information Reader

Search for bookmark and decode Exif metadata with the option to view GPS Exif coordinates in Google Earth automatically.
By Simon Key
2589 Downloads
App