xii
EnCase Forensic Version 6.11 Userʹs Guide
Contents
Testing a Non‐English Keyword......................................................................................................... 473
Querying the Index for Non‐English Content................................................................................... 474
Bookmarking Non‐English Language Text ....................................................................................... 475
Viewing Unicode Files.......................................................................................................................... 476
Viewing Non‐Unicode Files................................................................................................................. 477
Associating Code Pages........................................................................................................................ 477
CHAPTER 13 EnScript Analysis
479
EnScript Analysis........................................................................................................................................ 480
Enterprise EnScript Programs................................................................................................................... 481
Document Incident................................................................................................................................ 482
Machine Survey Servlet Deploy.......................................................................................................... 484
Quick Snapshot...................................................................................................................................... 488
Remote Acquisition Monitor ............................................................................................................... 488
Snapshot Differential Report ............................................................................................................... 489
Sweep Enterprise................................................................................................................................... 490
Forensic EnScript Code ........................................................................................................................ 491
Case Processor ....................................................................................................................................... 492
Case Processor Modules....................................................................................................................... 494
File Mounter........................................................................................................................................... 495
Compound Files .................................................................................................................................... 497
Mounting Compound Files.................................................................................................................. 497
Index Case .............................................................................................................................................. 497
Scan Local Machine............................................................................................................................... 498
Webmail Parser...................................................................................................................................... 498
EnScript Example Code ............................................................................................................................. 499
COM Folder EnScript Code ................................................................................................................. 499
EnScript Debugger ................................................................................................................................ 500
Help for EnScript Modules .................................................................................................................. 502
EnScript File Mounter........................................................................................................................... 503
Include EnScript .................................................................................................................................... 504
EnScript Help......................................................................................................................................... 505
EnScript Types....................................................................................................................................... 505
Packages ....................................................................................................................................................... 505
Package Features ................................................................................................................................... 505
New Package Dialog............................................................................................................................. 506
Package Panel ........................................................................................................................................ 506
Properties Panel..................................................................................................................................... 507
Create License Dialog ........................................................................................................................... 508
Using a Package..................................................................................................................................... 509
Creating a Package................................................................................................................................ 509
Editing a Package .................................................................................................................................. 510
Building a Package................................................................................................................................ 510
Creating a License ................................................................................................................................. 510
Running a Package................................................................................................................................ 511
Send To HBGary Responder EnScript ..................................................................................................... 511