Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer
Enfuse 2018 | May 21- 24
Learn More

Cortana Search Decoder

This script decodes Cortana search-terms from user-specified IndexedDB.edb files. The script reads these files directly; it does not use the Windows Extensible Storage Engine API.

Note that the script will only read the main database file, not the transaction-log files.

Output is to the console window and bookmarks.

Tuition regarding use of this script is provided on the Guidance Software Inc. Building an Investigation with EnCase training course.

Download Now



Version: 1.0.1
Tested with:
EnCase Forensic 8.05
Developer: Simon Key
Category: Artifact

114 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

Windows Installed Application Parser

Parses installed-application information and displays it in a manner similar to Microsoft Windows.
By Simon Key
130 Downloads
App
Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
108 Downloads
App
Artifact

Search For Valid Bitcoin Addresses

This EnScript searches entries and records for valid BitCoin addresses.
By Simon Key
105 Downloads
App
Artifact

Find IPV4 Addresses

Finds valid unique IPV4 addresses in ANSI/ASCII and Unicode text-formats.
By Simon Key
91 Downloads
App