Customize your EnCase Investigations with EnScript Plug-ins
Mensagens
A mostrar mensagens com a etiqueta EnScript
Yogesh Khatri's forensic blog: Downloads
- Obter link
- X
- Outras aplicações
Yogesh Khatri's forensic blog: Downloads Downloads From time to time, I write scripts, programs and whitepapers. These are free to share and use. They were all developed to make the job of the forensic analyst a lot easier. The mac_apt project (macOS artifact parsing tool) is available on GitHub here . All other mac (osx) related scripts are available here . For other scripts, see below. File Description IE RecoveryStore Travel Log Spec IE RecoveryStore & Travel Log Format Specification document IE Travelog Parser IE Travelog Parser_v7 (for Encase7.02) EnScript to extract data from Internet Explorer Travelog and RecoveryStore files. Read more about this artifact in my posts here and here . Hex Decoder Enscript GUI based EnScript for decoding hex to ascii. Read details here . NTFS Forensics Presentation Presentation on NTFS Forensics for the open security group "null" Parse XP System Restore change logs ...