Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Timezone Info Prior to Processing

This EnScript was authored in an attempt to save the examiner the time of manually parsing the System Registry Hive to determine the current control set and then parse the current control set to retrieve the timezone information for each of the evidence files loaded into EnCase Evidence tab.

What this EnScript does not do is automatically change the timezone for each of the evidence files loaded into EnCase Evidence tab. The examiner must change the individual timezone settings of each device within the Entries view of EnCase once the information has been retrieved by the EnScript.

Download Now



Version: 1.1
Tested with:
EnCase Forensic 7.06
Developer: Jamey Tubbs
Category: Artifact

8633 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
9970 Downloads
App
Artifact

Cortana Search Decoder

Decodes the search terms stored in IndexedDB.edb files used by the Microsoft Windows Cortana search function.
By Simon Key
7637 Downloads
App
Artifact

ShellBags Parser

Parses recent-folder view settings maintained by the Microsoft Windows operating system.
By Simon Key
381 Downloads
App
Artifact

User Assist Registry Value Decoder

Decodes data used by the Microsoft Windows operating system to populate each user's start menu with frequently used applications.
By Simon Key
226 Downloads
App