<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-1746946614390371171.post8900216978388007088..comments</id><updated>2011-08-25T03:25:32.377-07:00</updated><category term='Cell Phones'/><category term='CRLF'/><category term='Wireless'/><category term='Vista'/><category term='Kindle'/><category term='CP'/><category term='File Signatures'/><category term='Hash'/><category term='SQL'/><category term='File System'/><category term='Email'/><category term='Patch'/><category term='Exclusion List'/><category term='dd'/><category term='SHA1'/><category term='MFT'/><category term='Photos'/><category term='Service Pack'/><category term='Keywords'/><category term='Import'/><category term='Encryption'/><category term='Firewall'/><category term='export'/><category term='EnScript Requests'/><category term='Install Date'/><category term='Timestamps'/><category term='Office Metadata'/><category term='NIST'/><category term='Password Bypass'/><category term='EnScript Tutorial'/><category term='MAC Address'/><category term='Domains'/><category term='GREP'/><category term='Thumbnails'/><category term='FTP'/><category term='USB History'/><category term='Virus'/><category term='Search Hits'/><category term='Bookmark'/><category term='MD5'/><category term='Winen'/><category term='LogFile'/><category term='EMLX'/><category term='Video'/><category term='Operating System'/><category term='Yahoo'/><category term='Duplicates'/><category term='Icons'/><category term='USNJRNL'/><category term='Restore Points'/><category term='Windows 7'/><category term='Base64'/><category term='Unallocated'/><category term='eBlaster'/><category term='Ghost'/><category term='XOR'/><category term='VSS'/><category term='Selected Text'/><category term='Network Information'/><category term='Forensic Practical'/><category term='Decode'/><category term='SANS'/><category term='Extensions'/><category term='Limewire'/><category term='Search'/><category term='Registry'/><category term='OSX'/><category term='IIS'/><category term='Unused Disk Space'/><category term='Event Logs'/><category term='Norton AV'/><category term='Foreign Language'/><category term='Lanman'/><category term='Redaction'/><category term='UserAssist'/><category term='ICAC'/><category term='LUHN'/><category term='Count'/><category term='Filename'/><category term='thumbcache'/><category term='ROT13'/><category term='HTML'/><category term='Incident Response'/><category term='Anti-Forensics'/><category term='Memory'/><category term='Internet History'/><category term='LEF'/><category term='File Types'/><category term='Triage'/><category term='SearchPak'/><category term='F-Response'/><category term='BitLocker'/><title type='text'>Comments on Computer Forensics, Malware Analysis &amp;amp; Digital Investigations: EnScript to Compare evidence against hash set(s) a...</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://www.forensickb.com/feeds/8900216978388007088/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html'/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>6</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-3006828550005241789</id><published>2011-08-25T03:25:32.377-07:00</published><updated>2011-08-25T03:25:32.377-07:00</updated><title type='text'>better late than never, but it appears you get tha...</title><content type='html'>better late than never, but it appears you get that error if you have multiple instances on EnCase open, as the first instance of encase locks the encase.HASH file in \Program Files\EnCase.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3006828550005241789'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3006828550005241789'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1314267932377#c3006828550005241789' title=''/><author><name>Fhiyll</name><uri>http://www.blogger.com/profile/01156103201789205486</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1615179513'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-3305960736195732512</id><published>2009-12-17T11:18:40.373-08:00</published><updated>2009-12-17T11:18:40.373-08:00</updated><title type='text'>Lance, I might of had a gremlin in my computer ran...</title><content type='html'>Lance, I might of had a gremlin in my computer ran your script three times today and it work fine. thanks for a good script. Will Email you.&lt;br /&gt;rebuilt</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3305960736195732512'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3305960736195732512'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1261077520373#c3305960736195732512' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1984292077'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-3407714334904986728</id><published>2009-12-15T11:26:02.879-08:00</published><updated>2009-12-15T11:26:02.879-08:00</updated><title type='text'>Please contact me by email so we can try and troub...</title><content type='html'>Please contact me by email so we can try and troubleshoot the problem you are encountering.&lt;br /&gt;&lt;br /&gt;lance(at)forensickb.com</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3407714334904986728'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3407714334904986728'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1260905162879#c3407714334904986728' title=''/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1592171251'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-4360818859646361275</id><published>2009-12-15T09:51:11.815-08:00</published><updated>2009-12-15T09:51:11.815-08:00</updated><title type='text'>I am still getting the same error. I am usuing ver...</title><content type='html'>I am still getting the same error. I am usuing version 6.15 64bit. Check path ok error comes after 114k of files extracted tried it on 2 seperate cases hard drive for extraction triple the size of image. same result. any thoughts?&lt;br /&gt;Rebuilt</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/4360818859646361275'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/4360818859646361275'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1260899471815#c4360818859646361275' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1984292077'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-3448547314098873842</id><published>2009-12-14T23:00:40.254-08:00</published><updated>2009-12-14T23:00:40.254-08:00</updated><title type='text'>Check your export path for your case, it must be a...</title><content type='html'>Check your export path for your case, it must be a valid path.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3448547314098873842'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/3448547314098873842'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1260860440254#c3448547314098873842' title=''/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1592171251'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-5281059343836947918</id><published>2009-12-14T10:56:35.342-08:00</published><updated>2009-12-14T10:56:35.342-08:00</updated><title type='text'>I ran the script and I keep getting an Error &amp;#39;...</title><content type='html'>I ran the script and I keep getting an Error &amp;#39;&amp;#39;Cannot access close file&amp;#39;&amp;#39; what could cause this? rebuilt</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/5281059343836947918'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/8900216978388007088/comments/default/5281059343836947918'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html?showComment=1260816995342#c5281059343836947918' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2009/08/enscript-to-compare-evidence-against.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-8900216978388007088' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/8900216978388007088' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1984292077'/></entry></feed>
