Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Run Condition As Filter

This download consists of a ZIP file containing two filters (EnFilter files): one for entries and one for artifacts (aka records).

The filters are designed to make it easier to locate, edit, and launch conditions from multiple locations (as per the internal EnScript launcher). They also make it easier to create modified copies of the conditions that ship with EnCase.

When saving a modified condition, the user's conditions folder will be used by default. This can be changed.

It's important to note that the location of a saved condition will be stored within the condition itself - this is a requirement of EnCase.

Moving a condition after its saved may therefore result in problems if subsequently edited/executed directly from EnCase.

The filters are not bound by this limitation as they ignore the internal path of any condition they launch.

Note that the name shown in the condition-editor dialog is not used in any way; it is ignored when a copy of a condition is saved.

When scanning the path(s) specified by the user, all conditions will be indexed regardless of the type of object they're designed to process, i.e., entries or artifacts.

If none of the indexed conditions are suited to processing the type of object currently in view, none will be shown in the search dialog.

The filters should be extracted and copied to the user's Documents\EnCase\Filter folder.

Both filters use the same path(s) specified by the user, so it's not necessary to specify those paths twice.

Download Now



Version: 2.1
Tested with:
EnCase Forensic 8.08
Developer: Simon Key
Category: Utility

346 DOWNLOADS

YOU MAY ALSO LIKE

Utility

SQLite Blob Extractor

This script is designed to extract BLOB-data from SQLite database files.
By Simon Key
1155 Downloads
App
Utility

Registry Viewer Plugin

This script allows the examiner to to use a right-click context-menu-option or keyboard shortcut to view Registry hive files (SYSTEM, SOFTWARE, SECURITY, SAM, NTUSER,DAT, etc.).
By Simon Key
766 Downloads
App
Utility

Export Result-Set to Project VIC

This script is designed to extract a user-specified result-set to a Project VIC data-set.
By Simon Key
31 Downloads
App
Utility

Multiple Date Range Filter - Entries Only (EnFilter)

This EnScript filter allows the examiner to show/hide entries using multiple date-ranges and one of four different logic options.
By Simon Key
25 Downloads
App