Print Spool - SHD & SPL Parser
Print Spool - Parse Data From SHD and SPL Files (V1.3.1)
This EnScript will parse and bookmark the print shadow (SHD) and print spool (SPL) files specified by the user.
The administrative data for each print job is contained in the SHD file. The SHL file contains the image data.
If the time reported by the SHD and SPL files differs by less than 1 second it will not be reported as an error.
The script supports SHD/SPL files from Windows versions XP/Vista/7/8/10. It will only parse image data in EMF format.
This script was developed for use in EnCase training. For more details, please click the following link:
Download Now
Version:
1.3.1
Tested with:
EnCase Forensic 8.05.00.182
EnCase Forensic 8.05.00.182
Developer: Lynette Goh
Category: Artifact
1582
Downloads
35
Downloads in last 6 months