In my job as a digital forensics and eDiscovery consultant, I have to not only find files but also go back and wipe files from a disk (remediation). In the past I have handled this by finding the files in the image, exporting a wipe list, and then writing a shell script to batch out another wiping utility such as cipher or eraser.
I found this method to be somewhat tedious, especially since I don't have to do it all that often and forget some of the exact commands I used before. I wrote the FileRemediator EnScript to solve this problem. It uses EnCase's built-in wiping function to target individual files and folders on a local device and then create all the necessary logs.
YOU MAY ALSO LIKE