Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

JPEGSnoop

JPEGSnooper is a port of some of the functionality of the freeware application JPEGsnoop Version 1.5.2 by Calvin Hass and the JPEG metadata analysis functionality of Irfanview to EnCase. This script will analyze selected JPEG files cull present metadata from the file and display the decoded results in the console. Thus an examiner does not have to individually open each image file with an external file viewer such as Irfanview or JPEGSnooper to view the present metadata. Currently the script will process any valid JPEG image and present available metadata. Additionally it will provide manufacturer specific information for NIKON cameras. (This is additional information NIKON cameras will write sometimes to image files.) Additional support for other manufacturers will be in later updates.

Download Now



Version: 1.0.0
Tested with:
EnCase Forensic 7.05
Developer: Casimer Szyper
Category: Artifact

9275 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
9970 Downloads
App
Artifact

Cortana Search Decoder

Decodes the search terms stored in IndexedDB.edb files used by the Microsoft Windows Cortana search function.
By Simon Key
7636 Downloads
App
Artifact

ShellBags Parser

Parses recent-folder view settings maintained by the Microsoft Windows operating system.
By Simon Key
381 Downloads
App
Artifact

User Assist Registry Value Decoder

Decodes data used by the Microsoft Windows operating system to populate each user's start menu with frequently used applications.
By Simon Key
226 Downloads
App