This EnScript was authored in an attempt to save the examiner the time of manually parsing the System Registry Hive to determine the current control set and then parse the current control set to retrieve the timezone information for each of the evidence files loaded into EnCase Evidence tab.

What this EnScript does not do is automatically change the timezone for each of the evidence files loaded into EnCase Evidence tab. The examiner must change the individual timezone settings of each device within the Entries view of EnCase once the information has been retrieved by the EnScript.

This script was developed for use in EnCase training. For more details, please click the following link:

• OpenText EnCase Training