Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Pre-Evidence Processing Tasks

This EnScript is designed to be run before the Evidence Processor. This EnScript does three things:

- Bookmarks and writes to the console certain timezone information.
- Mounts document files based on file extensions of: docx xlsx pptx odt ods and odp
- Mounts the following registries from Windows\System32\config: SAM SYSTEM SOFTWARE SECURITY
- Mounts NTUser.dat from the User Profiles.
- Mounts and Bookmarks settings.dat files that have values from the User Profiles.

Download Now



Version: 1
Tested with:
EnCase Forensic 7.07
Developer: Tim Taylor
Category: Utility

4513 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
303 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
142 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
121 Downloads
App
Utility

Run Condition As Filter

This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
By Simon Key
72 Downloads
App