Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Search and Bookmark Specific Data Types

This script searches for specific keywords and bookmarks the hits for each one using a specified data-type.

The script supports searching both records and entries; it also allows the examiner to create a result-set for responsive items.

The option to bookmark only those hits at sector-offset zero is useful for excluding extraneous file-signature search-hits.

This option is only applicable to records. It should be used with care as it might exclude relevant data embedded in other files, e.g. MFT-resident files, embedded thumbnail images, JPEG pictures in Word documents, etc.

Download Now



Version: 5.0
Tested with:
EnCase Forensic 8.07
Developer: Simon Key
Category: Utility

6626 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
235 Downloads
App
Utility

View SQLite With WAL Plugin

Allows SQLite database files to be opened in conjunction with any write-ahead log (WAL) file.
By Simon Key
140 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
99 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
72 Downloads
App