Windows Quick View Plugin
This is a self-installing EnCase V7 application-plugin that adds a right-click context-menu option allowing the user to view an item (entry, bookmark, record or result-set entry) using the Windows application registered to handle that item's file-type (as identified by file-extension).
The plugin was developed primarily to overcome a limitation preventing items being viewed externally from the Bookmarks and Results tabs. In order to view a file the script extracts a temporary copy of it into a sub-folder of the current case's temporary folder. A restriction in the plugin's operation prevents temporary files being deleted automatically but an additional context-menu option facilitates easy access to the current case's temporary folder so that temporary files can be deleted/wiped manually.
A warning will be given before viewing any item over a pre-configured size limit of 512MB. This is to prevent the accidental viewing of large files (unallocated clusters, etc), which will cause EnCase to hang while temporary copies of the files are being extracted. This limit can be modified or disabled via the plugin's application-tab.
YOU MAY ALSO LIKE