Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer
Enfuse 2018 | May 21- 24
Learn More

Dumpkeychain

Dumpkeychain is a Windows command-line utility for decrypting credentials from Mac OS X system and user keychains given the associated system-key-file or keychain-password respectively. Mac OS X user keychains often contain many Internet account passwords login credentials and secure notes. The system keychain contains Wi-Fi passwords and other shared credentials.

The application has been tested/developed under Windows 7 using keychain data from Mac OS X 10.8 Mountain Lion and the developers' preview of Mac OS X 10.9 Mavericks. Output is to a user-nominated text file. This version of the application fixes a bug when parsing keychain-tables containing unused record-pointers. It also adds the ability to output the created and last-modified timestamps for each record that has them.

Download Now



Version: 3.1
Tested with:
EnCase Forensic 7.07
Developer: Simon Key
Category: Utility

1751 DOWNLOADS

YOU MAY ALSO LIKE

Utility

Image Analyzer - 30 Day Free Trial

Free 30 day trial with unlimited image scans – download today and accelerate your investigation. Image Analyzer scans image files within entries and records to identify pornographic content.
By Image Analyzer
145 Downloads
App
Utility

Item Ancestor Resolution

This script allows the examiner to identify the ancestors (emails, etc.) of items in a given result-set so they can be bookmarked and/or extracted.
By Simon Key
69 Downloads
App
Utility

ZIP Index Entry Finder

This EnScript will search for, and bookmark, ZIP-file index-entries. It was designed for the recovery of data from deleted ZIP files that can't otherwise be recovered, either because they're partially overwritten or fragmented.
By Simon Key
65 Downloads
App
Utility

Flat File Export

This script is designed to copy tagged items into a single output-folder and report-on user-specified properties in the process.
By Simon Key
53 Downloads
App