Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Run Condition As Filter

This download consists of a ZIP file containing two filters (EnFilter files): one for entries and one for artifacts (aka records).

The filters are designed to make it easier to locate, edit, and launch conditions from multiple locations (as per the internal EnScript launcher). They also make it easier to create modified copies of the conditions that ship with EnCase.

When saving a modified condition, the user's conditions folder will be used by default. This can be changed.

It's important to note that the location of a saved condition will be stored within the condition itself - this is a requirement of EnCase.

Moving a condition after its saved may therefore result in problems if subsequently edited/executed directly from EnCase.

The filters are not bound by this limitation as they ignore the internal path of any condition they launch.

Note that the name shown in the condition-editor dialog is not used in any way; it is ignored when a copy of a condition is saved.

When scanning the path(s) specified by the user, all conditions will be indexed regardless of the type of object they're designed to process, i.e., entries or artifacts.

If none of the indexed conditions are suited to processing the type of object currently in view, none will be shown in the search dialog.

The filters should be extracted and copied to the user's Documents\EnCase\Filter folder.

Both filters use the same path(s) specified by the user, so it's not necessary to specify those paths twice.

Download Now



Version: 2.1
Tested with:
EnCase Forensic 8.08
Developer: Simon Key
Category: Utility

88 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
347 Downloads
App
Utility

Volatility Plugin

This EnScript is designed to facilitate easier use of Volatility in EnCase. It can be configured for any number of Volatility plugins and supports multithreading.
By Simon Key
176 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
153 Downloads
App
Utility

View SQLite With WAL Plugin

Allows SQLite database files to be opened in conjunction with any write-ahead log (WAL) file.
By Simon Key
85 Downloads
App