Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

RegRipper Launcher

“RegRipper is the fastest, easiest and best tool for registry analysis in forensic examinations.”


The RegRipper Launcher EnScript does just that, launches RegRipper directly from EnCase. Select the desired registries in EnCase, run the RegRipper Launcher from the EnScript drop down and view the results in console mode and/or Word. You can also bookmark your findings.

Using this EnScript you will no longer have to export "ntuser.dat" files and remember who was the owner of this registry. Just check all "ntuser.dat" files, run the script and check results or bookmarks. This EnScript will automatically adapt itself to any new RegRipper plugins you may install.

Requires RegRipper, created and maintained byHarlan Carvey. RegRipper can be downloaded for free at www.RegRipper.wordpress.com

Instruction manual included with download.

Note: This EnScript is no longer supported and updates, bug fixes or support portal help should not be expected.



Version: 1.1
Tested with:
EnCase Forensic 7.08
Developer: Guidance Software
Category: Utility

820 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
757 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
507 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
412 Downloads
App
Utility

Run Condition As Filter

This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
By Simon Key
219 Downloads
App