Saturday, March 6, 2010

EnScript to export all files based on condition criteria

I frequently have a need to export various file types for review or to pass on to a third party.

This EnScript was designed to quickly define what files will be exported based on entryclass criteria, i.e. name, path, extension, etc. When you run the EnScript, a familiar condition window will appear that will allow you to define whatever criteria you want to use to select the files to be exported.

The image below is a simple example to export JPG, JPEG files that only have a signature match:

The files will be exported into a subfolder of the case export folder grouped into subfolders based on the device it came from in case you have multiple devices loaded. Each file type, based on extension, will then be placed into a respective subfolder named after the extention.

 Download Here


Post a Comment

Computer Forensics, Malware Analysis & Digital Investigations

Random Articles