RegRipper Launcher
“RegRipper is the fastest, easiest and best tool for registry analysis in forensic examinations.”
The RegRipper Launcher EnScript does just that, launches RegRipper directly from EnCase. Select the desired registries in EnCase, run the RegRipper Launcher from the EnScript drop down and view the results in console mode and/or Word. You can also bookmark your findings.
Using this EnScript you will no longer have to export "ntuser.dat" files and remember who was the owner of this registry. Just check all "ntuser.dat" files, run the script and check results or bookmarks. This EnScript will automatically adapt itself to any new RegRipper plugins you may install.
Requires RegRipper, created and maintained byHarlan Carvey. RegRipper can be downloaded for free at www.RegRipper.wordpress.com
Instruction manual included with download.
Note: This EnScript is no longer supported and updates, bug fixes or support portal help should not be expected.
Version: 1.1
Tested with:
EnCase Forensic 7.08
EnCase Forensic 7.08
Developer:
Guidance Software
Category: Utility
820 DOWNLOADS
YOU MAY ALSO LIKE
Utility
SQLite Blob Extractor
This script is designed to extract BLOB-data from SQLite database files.
Utility
Volatility Plugin
This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
Utility
Registry Viewer Plugin
This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
Utility
Run Condition As Filter
This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.