Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Create Result Set Excluding Unwanted Items

This app creates a result-set from user-specified items excluding those items that match hash-items with a 'Known' category in the current hash-library. The script's built-in condition can be used to exclude additional items that have certain file-types, file-extensions, file-paths, file-names, etc. The examiner can opt to split the output into multiple result-sets that are grouped according to file-category or file-extension.

Resolving matching hash-items can take some-time. That said, having sorted or filtered entries by way of hash category prior to running this script will speed the process considerably. Note that this optimization applies only to EnCase V7.09 or later.

Download Now



Version: 1
Tested with:
EnCase Forensic 7.09
Developer: Simon Key
Category: Utility

531 DOWNLOADS

YOU MAY ALSO LIKE

Utility

Image Analyzer - 30 Day Free Trial

Free 30 day trial with unlimited image scans – download today and accelerate your investigation. Image Analyzer scans image files within entries and records to identify pornographic content.
By Image Analyzer
145 Downloads
App
Utility

ZIP Index Entry Finder

This EnScript will search for, and bookmark, ZIP-file index-entries. It was designed for the recovery of data from deleted ZIP files that can't otherwise be recovered, either because they're partially overwritten or fragmented.
By Simon Key
71 Downloads
App
Utility

Item Ancestor Resolution

This script allows the examiner to identify the ancestors (emails, etc.) of items in a given result-set so they can be bookmarked and/or extracted.
By Simon Key
56 Downloads
App
Utility

Flat File Export

This script is designed to copy tagged items into a single output-folder and report-on user-specified properties in the process.
By Simon Key
54 Downloads
App