Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Export and Bookmark Files Based On Extension

This script will bookmark and export files into separate folders according to the file extensions specified by the examiner.

Zero-length files and those that have been overwritten will be bookmarked but not copied.

Bookmark and export folders for a given extension will only be created if files with that extension have been found.

Note that the list of extensions will be de-duped automatically before processing.

The script will create a tab-delimited index file allowing the examiner to determine the original path and associated metadata of each extracted file.

The examiner can choose whether or not to truncate long output paths. If this option is taken, the script will check to see if the output path comprising a target file's original name would be longer than 260-characters. If so, the script will use a truncated filename of the form -

<index> - Truncated.<extension>

The index-file can be used to determine the original path of a file whose output filename has been truncated.

The examiner can choose to hyperlink the absolute output path in the index file, but a restriction in Excel will prevent the hyperlink working if the path contains a hash (#) character.

Settings are remembered for re-use.

Download Now



Version: 6.1
Tested with:
EnCase Forensic 8.07
Developer: Simon Key
Category: Utility

4712 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
303 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
142 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
121 Downloads
App
Utility

Run Condition As Filter

This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
By Simon Key
72 Downloads
App