Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Registry Viewer Plugin

This is a self-installing viewer for Windows Registry-hive files. Once installed, it is invoked using the CTRL+SHIFT+Y keyboard shortcut.

The viewer allows the examiner to interpret long-integer (QWORD) and 8-byte binary values as Windows FILETIME timestamps.

Binary data can also rendered as ANSI/ASCII characters. Any non-ANSI/ASCII character will be rendered as a centre-dot (·) character.

If both of the above options are chosen, 8-byte binary values will be decoded as timestamps only.

Output is by way of data bookmarks.

Download Now



Version: 1.4
Tested with:
EnCase Forensic 8.08
Developer: Simon Key
Category: Utility

1641 DOWNLOADS

YOU MAY ALSO LIKE

Utility

Run Condition As Filter

This download consists two filters designed to make it easier to locate, edit, and launch conditions from multiple locations. They also make it easier to create modified copies of the conditions that ship with EnCase.
By Simon Key
591 Downloads
App
Utility

Multiple Date Range Filter - Entries Only (EnFilter)

This EnScript filter allows the examiner to show/hide entries using multiple date-ranges and one of four different logic options.
By Simon Key
232 Downloads
App
Utility

Export Result-Set to Project VIC

This script is designed to extract a user-specified result-set to a Project VIC data-set.
By Simon Key
230 Downloads
App
Utility

Microsoft Word ASD Document Viewer

This EnScript plugin allows Autosave Document (ASD) files to be extracted and opened with Microsoft Word.
By Simon Key
183 Downloads
App