Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Search For Valid Bitcoin Addresses

This EnScript searches entries and records for BitCoin addresses. It uses the following GREP, ANSI/Unicode, case-sensitive search expressions -

  • [13][1-9,A-H,J-N,P-Z,a-k,m-z]{25,33}
  • bc1[0,2-9,a,c-h,j-n,p-z,A,C-H,J-N,P-Z]{6,87}

Notwithstanding that these search-expressions will usually generate quite a large number of hits, the script will only bookmark a hit if it can be validated.

Original Bitcoin addesses (those beginning with 1 or 3) are validated using 3rd party source-code from the Casascius Bitcoin Address Utility. This in turn uses source code from The Legion of the Bouncy Castle C# .NET Crypto Api.

This script was developed for use in EnCase training. For more details, please click the following link:

Download Now

Download Now


FAQ

Version: 2.0
Tested with:
EnCase Forensic 21.01.00.68
Developer: Simon Key
Category: Artifact

378 Downloads
139 Downloads in last 6 months