Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.
Become a DeveloperThis is a simple script that extracts the drive-letter mappings from HKCU\Network.
The script will process specified NTUSER.DAT files from the current case.
Output is by way of bookmarks and a tab-delimited spreadsheet file openable in Microsoft Excel.
This script was developed for use in EnCase training. For more details, please click the following link:
Download NowTo begin your download, please provide the following information to generate your trial license. Your 0-day free trial license will be delivered via email.
Please wait while we generate your license...
Success!
| License: | Download Now |
| Installer: | Download Now |
There seems to have been an error. Please contact us for more information.
ShellBags Parser
User Assist Registry Value Decoder
VSS Examiner
Windows Device Properties Parser