Filter
Exclude
Time range
-
Near
New #EnCase #EnScript sample demonstrates mounting/parsing compound files, in this case DOCX, XLSX, and PPTX files with an underlying ZIP structure. github.com/sdckey/EnScript-S… #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
2
3
221
18 Jul 2024
New #EnCase #EnScript sample demonstrating the recursive extraction of embedded document objects. github.com/sdckey/EnScript-S… #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
1
174
14 Mar 2024
In addition to importing new network nodes, the #EnCase Endpoint Investigator Network Utility Plugin makes it easy to locate/select existing nodes using multiple criteria. tiny.cc/8uw4ky #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery #EnScript
4
180
Need to locate URLs or Windows file-paths containing one or more keywords? Give the #EnCase URL and Windows File-Path Finder #EnScript a try: tiny.cc/udb4xz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
1
5
271
V2 of the #EnCase Endpoint Security Registry Value Extractor #EnScript facilitates searching multiple EES result-LEFs for notable Registry values using GREP where necessary. tiny.cc/apmmwz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
1
8
379
New #EnCase #EnScript sample demonstrating a simple wait-loop of the type that might be used to detect whether an external process has finished running, e.g., a #Python script. github.com/sdckey/EnScript-S… #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
2
178
New #EnScript sample showing how to create #SQLite indexes and views; also how to resolve item monikers stored outside of #EnCase, e.g., for use in #Python. github.com/sdckey/EnScript-S… #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
6
233
23 Nov 2023
V4.01 of the #EnCase MacOS QuickLook Thumbcache Parser #EnScript supports #macOS #Sonoma. tiny.cc/tk8fvz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
3
8
601
V3 of the #EnCase Windows Quick View Plugin #EnScript facilitates easier viewing of embedded data using the default Windows application. tiny.cc/4453vz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
2
6
651
12 Oct 2023
V2 of the #EnCase #SQLite Varint Parser #EnScript now presents the length occupied by each VARINT as well as its value. tiny.cc/vy7cvz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
1
4
221
21 Sep 2023
V3 of the #EnCase #SQLite Free-Page Parser #EnScript provides options to skip validation-checking and automatically decompress GZIP BLOB data upon extraction. tiny.cc/seegpy #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
2
5
328
30 May 2023
New #EnScript sample showing how to leverage #EnCase Information Assurance (IA) REST APIs. github.com/sdckey/EnScript-S… #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText #eDiscovery
2
4
373
22 Mar 2023
V5.2 of the #EnCase UNC Path Preview and Acquire #EnScript now supports capture of metadata alone. tiny.cc/9iegpy #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
3
195
16 Mar 2023
V4 of the #EnCase JSON Viewer Plugin #EnScript now supports viewing/extracting Base64-encoded data. Shown here viewing the key needed to decrypt @GoogleChrome login credentials, cookies, etc. tiny.cc/e6tutz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
2
5
365
V5 of the #EnCase Hash List Importer #EnScript now supports the @NIST NSRL RDSv3 hash-set format. tiny.cc/29ruly #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
4
5
336
Need to parse @GoogleChrome Internet history transition values using #EnCase? Give the Chrome History Transition Parser (V1.0.0) #EnScript a try: tiny.cc/g6w4vz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
2
5
299
3
7
527
23 Jan 2023
V2.0 of the #EnCase HEIC Image Viewer #EnScript plugin now reads EXIF data: tiny.cc/3mq0vz #DFIR #InfoSec #CaseAutomation #CustomWorkflows @OpenText
3
5
672