Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

MACE Timeline

Rearrange date and time information to build an informative timeline.

EnCase has one record per file. Each record may contain five timestamp-values: file created, last written, last accessed, file deleted and entry modified.

The script will create a record for each of a file's timestamp-values that is unique.

The fields in each record allow the examiner to determine which properties share the value in question.

Take, for example, the following data as shown in EnCase:

Filename Modified Accessed Created Entry Modified
samplefile1.txt 01/01/3000 01/01/3001 01/01/3002 01/01/3003
samplefile2.txt 01/02/3000 01/02/3001 01/02/3002 01/02/3002

 

The script's output for this data would be:

3000-01-01 M . . . samplefile1.txt
3000-02-01 M . . . samplefile2.txt
3001-01-01 . A . . samplefile1.txt
3001-02-01 . A . . samplefile2.txt
3002-01-01 . . C . samplefile1.txt
3002-02-01 . . C E samplefile2.txt
3003-01-01 . . . E samplefile1.txt

Download Now



Version: 1.1.1
Tested with:
EnCase Forensic 8.05
Developer: James Habben
Category: Utility

10876 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
235 Downloads
App
Utility

View SQLite With WAL Plugin

Allows SQLite database files to be opened in conjunction with any write-ahead log (WAL) file.
By Simon Key
140 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
99 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
72 Downloads
App