<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-1746946614390371171.post818251566308818592..comments</id><updated>2010-07-14T13:10:01.578-07:00</updated><category term='Cell Phones'/><category term='CRLF'/><category term='Wireless'/><category term='Vista'/><category term='Kindle'/><category term='CP'/><category term='File Signatures'/><category term='Hash'/><category term='SQL'/><category term='File System'/><category term='Email'/><category term='Patch'/><category term='Exclusion List'/><category term='dd'/><category term='SHA1'/><category term='MFT'/><category term='Photos'/><category term='Service Pack'/><category term='Keywords'/><category term='Import'/><category term='Encryption'/><category term='Firewall'/><category term='export'/><category term='EnScript Requests'/><category term='Install Date'/><category term='Timestamps'/><category term='Office Metadata'/><category term='NIST'/><category term='Password Bypass'/><category term='EnScript Tutorial'/><category term='MAC Address'/><category term='Domains'/><category term='GREP'/><category term='Thumbnails'/><category term='FTP'/><category term='USB History'/><category term='Virus'/><category term='Search Hits'/><category term='Bookmark'/><category term='MD5'/><category term='Winen'/><category term='LogFile'/><category term='EMLX'/><category term='Video'/><category term='Operating System'/><category term='Yahoo'/><category term='Duplicates'/><category term='Icons'/><category term='USNJRNL'/><category term='Restore Points'/><category term='Windows 7'/><category term='Base64'/><category term='Unallocated'/><category term='eBlaster'/><category term='Ghost'/><category term='XOR'/><category term='VSS'/><category term='Selected Text'/><category term='Network Information'/><category term='Forensic Practical'/><category term='Decode'/><category term='SANS'/><category term='Extensions'/><category term='Limewire'/><category term='Search'/><category term='Registry'/><category term='OSX'/><category term='IIS'/><category term='Unused Disk Space'/><category term='Event Logs'/><category term='Norton AV'/><category term='Foreign Language'/><category term='Lanman'/><category term='Redaction'/><category term='UserAssist'/><category term='ICAC'/><category term='LUHN'/><category term='Count'/><category term='Filename'/><category term='thumbcache'/><category term='ROT13'/><category term='HTML'/><category term='Incident Response'/><category term='Anti-Forensics'/><category term='Memory'/><category term='Internet History'/><category term='LEF'/><category term='File Types'/><category term='Triage'/><category term='SearchPak'/><category term='F-Response'/><category term='BitLocker'/><title type='text'>Comments on Computer Forensics, Malware Analysis &amp;amp; Digital Investigations: EnCase EnScript to hash selected files and provide...</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://www.forensickb.com/feeds/818251566308818592/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html'/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>4</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-7699961651981225173</id><published>2010-07-14T13:10:01.533-07:00</published><updated>2010-07-14T13:10:01.533-07:00</updated><title type='text'>Hi Lance!!

Nice little script :-)

Sugestion for ...</title><content type='html'>Hi Lance!!&lt;br /&gt;&lt;br /&gt;Nice little script :-)&lt;br /&gt;&lt;br /&gt;Sugestion for improvement:&lt;br /&gt;&lt;br /&gt;Add various hashvalues that the script can use - eg sha1_base32, sha1_base64, TTH, MD4, eD2K etc&lt;br /&gt;&lt;br /&gt;Make chek boxes to choose what values to calculate, and make the output in tab delimited format - this way it can be used in eg. Access or Excell&lt;br /&gt;&lt;br /&gt;Just a thought :-)&lt;br /&gt;&lt;br /&gt;Regards&lt;br /&gt;&lt;br /&gt;Søren C, Denmark</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/7699961651981225173'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/7699961651981225173'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html?showComment=1279138201533#c7699961651981225173' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-818251566308818592' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/818251566308818592' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1683256044'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-8322343002838124817</id><published>2009-11-11T09:34:02.130-08:00</published><updated>2009-11-11T09:34:02.130-08:00</updated><title type='text'>I can certainly try and help you. Please contact m...</title><content type='html'>I can certainly try and help you. Please contact me via email: lance(at)forensickb.com. Preferably send me a small sampling of the base16 sha hashes that you want to convert to base32, in the format you have them in. Don&amp;#39;t paste them in an email, send me the file or a small portion of the file.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/8322343002838124817'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/8322343002838124817'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html?showComment=1257960842130#c8322343002838124817' title=''/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-818251566308818592' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/818251566308818592' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1592171251'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-617116160404701525</id><published>2009-11-11T09:16:44.218-08:00</published><updated>2009-11-11T09:16:44.218-08:00</updated><title type='text'>Maybe you can help!!  i am working on a case where...</title><content type='html'>Maybe you can help!!  i am working on a case where I have a series of SHA1_Base16 message digests and I need to convert them to SHA1_Base32.  I do not have the orignal files only the Base16 (Hex)SHA1&amp;#39;s.  ANY idea how one converts them, I am not sure if you need orignal file to generate or if they could be made from one to another (I believe they can).  Could you point me in the correct direction??? I prefer a pearl or any linux script if possible...Thanks!!</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/617116160404701525'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/617116160404701525'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html?showComment=1257959804218#c617116160404701525' title=''/><author><name>Gary</name><uri>http://scr.im/gmrudd</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-818251566308818592' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/818251566308818592' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-646623863'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-5997451593473109709</id><published>2009-09-09T01:37:12.625-07:00</published><updated>2009-09-09T01:37:12.625-07:00</updated><title type='text'>Thanks so much for sharing this!

-Ian</title><content type='html'>Thanks so much for sharing this!&lt;br /&gt;&lt;br /&gt;-Ian</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/5997451593473109709'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/818251566308818592/comments/default/5997451593473109709'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html?showComment=1252485432625#c5997451593473109709' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/encase-enscript-to-hash-selected-files.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-818251566308818592' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/818251566308818592' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1747290580'/></entry></feed>
