tag:blogger.com,1999:blog-1746946614390371171.post7203121035369947638..comments2023-05-09T02:31:13.939-07:00Comments on Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to automate Internet Evidence Finder (IEF) for EnCase v6 & v7Lance Muellerhttp://www.blogger.com/profile/15789264000499223230noreply@blogger.comBlogger10125tag:blogger.com,1999:blog-1746946614390371171.post-17652559541911508062013-08-06T10:27:02.539-07:002013-08-06T10:27:02.539-07:00@Anon,
Can you send it to my email address lance ...@Anon,<br /><br />Can you send it to my email address lance (at) forensickb(dot)com? The code you posted did not entirely come through.<br /><br />LanceLance Muellerhttps://www.blogger.com/profile/15789264000499223230noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-2883669170717478132013-08-06T01:09:48.686-07:002013-08-06T01:09:48.686-07:00Hi Lance
I am trying to write a new script to coun...Hi Lance<br />I am trying to write a new script to count the number of files with a specific file extension and display the result in an excel sheet.I met an error saying string is an unknown identifier. Do u mind to tell me how to solve the error? i referenced from the dispatch class and file type class. below is my codeAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-64524623009990238522013-07-03T10:37:49.585-07:002013-07-03T10:37:49.585-07:00@Anonynous-
Be sure and use the v7 version of the...@Anonynous-<br /><br />Be sure and use the v7 version of the EnScript.Lance Muellerhttps://www.blogger.com/profile/15789264000499223230noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-54519418493500820332013-07-03T02:03:55.072-07:002013-07-03T02:03:55.072-07:00Hi
i have encountered some problems while writing ...Hi<br />i have encountered some problems while writing some enscript regarding the c.EntryRoot(). Does this still work in version 7 of enscript or has this changed?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-86980003226801847802013-06-29T10:15:06.596-07:002013-06-29T10:15:06.596-07:00Paul,
1. Create a new condition
2. Click on the “...Paul,<br /><br />1. Create a new condition<br />2. Click on the “Filters” tab in the “New Condition” dialog<br />3. Double click on the “DataPropertyRoot” Properties object<br />4. Type a name<br />5. Right-click on the “Main” object and choose “new”<br />6. Select “text” for properties, “contains” for operator and select the “Prompt for value” box, then click ok.<br />7. OPTIONAL – Add another by right-clicking on main and this time choose “name” as the property and “contains” as the operator and prompt for value again. This will allow you to look for text in a specific field. Once you have added this second criteria, be sure and right-click on main and choose “change logic” so it says AND instead of OR (default).<br />8. Click “ok” on the new filter dialog<br />9. Click on the “conditions” tab back on the initial “New condition” dialog<br />10. Right-click on “main” and choose “new”<br />11. Scroll to the bottom of the properties list and you should see the filter you created with whatever name you gave it. Select that object.<br />12. Select the “equal to” operator<br />13. Double click on “true” to have it populate the “Value” field<br />14. Click “ok”<br />15. Click “ok” to close the new condition dialog<br />Lance Muellerhttps://www.blogger.com/profile/15789264000499223230noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-18808124885019309352013-06-28T15:19:04.536-07:002013-06-28T15:19:04.536-07:00Love the script. Unless I'm missing something ...Love the script. Unless I'm missing something I can't figure out how to see the column in the table pane and therefore create a condition to filter etc. Any suggestions? Anonymoushttps://www.blogger.com/profile/11446962847038591082noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-69508640064084973492013-06-18T06:44:14.500-07:002013-06-18T06:44:14.500-07:00@Anon,
This is not a bug. Guidance made made a ch...@Anon,<br /><br />This is not a bug. Guidance made made a change in the way dialogs are displayed starting in version 7.06. Please update to the latest version of EnCase.Lance Muellerhttps://www.blogger.com/profile/15789264000499223230noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-43137922036861488962013-06-18T00:48:03.647-07:002013-06-18T00:48:03.647-07:00Great job, but there is a bug ...
IEF_v1_EnCase_v7...Great job, but there is a bug ...<br />IEF_v1_EnCase_v7.EnPack (54): "OPTION_GROUPBOX" is an unknown identifier<br />in EnCase 7.05Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-25688992903284460832013-05-22T02:23:12.925-07:002013-05-22T02:23:12.925-07:00Hi Ronald,
There are currently no plans to allow ...Hi Ronald,<br /><br />There are currently no plans to allow you to choose specific artifacts from the API. IEF is constantly adding new artifacts and then it becomes too much of a moving target. The API currently allows you to select categories of artifacts (i.e. P2P, chat, etc) , which still allows you to limit the scope of what is searched for, if needed, but also allows and easy to maintain API.Lance Muellerhttps://www.blogger.com/profile/15789264000499223230noreply@blogger.comtag:blogger.com,1999:blog-1746946614390371171.post-50355170315108288222013-05-19T14:15:35.032-07:002013-05-19T14:15:35.032-07:00Nice start for you with the IEF team. I'm a gr...Nice start for you with the IEF team. I'm a great "fan" of IEF and use it at almost every case. At this point i only can choose a whole group instead of items. (as in the picture showe above). Maybe in an IEF enscript version 2 ?.<br /><br />Ronald Koenders<br />Amsterdam police<br />the netherlands.Ronald Koendersnoreply@blogger.com