Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Cortana Search Decoder

This script decodes Cortana search-terms from user-specified IndexedDB.edb files. The script reads these files directly; it does not use the Windows Extensible Storage Engine API.

Note that the script will only read the main database file, not the transaction-log files.

Output is to the console window and bookmarks.

This script was developed for use in EnCase training. For more details, please click the following link:

Download Now

Download Now


FAQ

Version: 1.0.1
Tested with:
EnCase Forensic 8.05
Developer: Simon Key
Category: Artifact

173 Downloads
4 Downloads in last 6 months