Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Print Spool - SHD & SPL Parser

Print Spool - Parse Data From SHD and SPL Files (V1.3.1)

This EnScript will parse and bookmark the print shadow (SHD) and print spool (SPL) files specified by the user.

The administrative data for each print job is contained in the SHD file. The SHL file contains the image data.

If the time reported by the SHD and SPL files differs by less than 1 second it will not be reported as an error.

The script supports SHD/SPL files from Windows versions XP/Vista/7/8/10. It will only parse image data in EMF format.

This script was developed for use in EnCase training. For more details, please click the following link:

Download Now

Download Now


FAQ

Version: 1.3.1
Tested with:
EnCase Forensic 8.05.00.182
Developer: Lynette Goh
Category: Artifact

1563 Downloads
164 Downloads in last 6 months