Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Create Result Set Excluding Unwanted Items

This app creates a result-set from user-specified items excluding those items that match hash-items with a 'Known' category in the current hash-library. The script's built-in condition can be used to exclude additional items that have certain file-types, file-extensions, file-paths, file-names, etc. The examiner can opt to split the output into multiple result-sets that are grouped according to file-category or file-extension.

Resolving matching hash-items can take some-time. That said, having sorted or filtered entries by way of hash category prior to running this script will speed the process considerably. Note that this optimization applies only to EnCase V7.09 or later.

Download Now



Version: 1
Tested with:
EnCase Forensic 7.09
Developer: Simon Key
Category: Utility

7493 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
636 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
426 Downloads
App
Utility

Run Condition As Filter

This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
By Simon Key
262 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
231 Downloads
App