Please select a template
“RegRipper is the fastest, easiest and best tool for registry analysis in forensic examinations.”
The RegRipper Launcher EnScript does just that, launches RegRipper directly from EnCase. Select the desired registries in EnCase, run the RegRipper Launcher from the EnScript drop down and view the results in console mode and/or Word. You can also bookmark your findings.
Using this EnScript you will no longer have to export "ntuser.dat" files and remember who was the owner of this registry. Just check all "ntuser.dat" files, run the script and check results or bookmarks. This EnScript will automatically adapt itself to any new RegRipper plugins you may install.
Requires RegRipper, created and maintained byHarlan Carvey. RegRipper can be downloaded for free at www.RegRipper.wordpress.com
Instruction manual included with download.
Note: This EnScript is no longer supported and updates, bug fixes or support portal help should not be expected.
YOU MAY ALSO LIKE
This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
This EnScript filter allows the examiner to show/hide entries using multiple date-ranges and one of four different logic options.
This script is designed to extract a user-specified result-set to a Project VIC data-set.
This EnScript plugin allows Autosave Document (ASD) files to be extracted and opened with Microsoft Word.