UsnJrnl Record Keyword Search and Export to CSV
This script will prompt for a keyword from the user then search selected tagged items for that keyword. It will then check the search hit to see if it is the file name in a UsnJrnl record entry. If it is a UsnJrnl record it will parse selected fields from the record and export them to a .csv file in the case default export folder. Useful for searching for change journal records in slack and unallocated space.
Download Now
Version:
1.0.0
Tested with:
EnCase Forensic 7.05
EnCase Forensic 7.05
Developer: William Lynn
Category: Utility
976
Downloads
1
Downloads in last 6 months