EnScript - Export Email For Intella

[forensicdan]

Hello.

 

Would anyone know where to download the the EnCase EnScript for email export to Intella ?

 

I could not locate it at the Vound website or google searching ?

 

Thanks.

[admin]

Hi Dan,

 

Here is a link to the EnCase 6 script.

 

EnPack

 

Thanks for using the forum.

[forensicdan]

Thank you for the link !

 

Dan

[Hagrid]

Can someone explain what the EnCase EnScript does and the advantage of using it. I typically just export the PST files and then add them to Intella and index/reindex.

 

Thanks,

[admin]

Hi Hagrid,

 

The EnScript will export out all of the "User created" documents and files from the image (s). This includes email files, office doc's, PDF's, rtf's, images and so on... All the file types you would expect a user to have in locations like My Documents, DATA and such. These are a the file types Intella is best at reviewing..

 

The concept is that 95% of the time the evidence is found in a document, file or email the user has created or received. The other 5% it is a registry setting, a recovered file or some other evidence type that needs specialist software to interpret.

 

Using a "Forensic Analysis" tool that is more designed to look at devices, link files, registry or recovery is over kill (and requires a trained user) and is not as easy or requiring as much training as using a "Forensic Search" tool like Intella.

 

So in short, 95% of the time you can use the EnScript to export out the data and use Intella to reduce the complexity, cost and time it takes to review the data types that most often lead to the "smoking gun" .

 

 

Please note the EnScript is for V6 only ATM.

[timothytan@nexiats.com.sg]

Hi there,

Good Day! Everyone

 

Anyone here be able to provide the latest Intella vX.X EnScript?

I don't seem to be able to find it after much searches on the internet.

 

Much Appreciated,

Thank You.

[Chris]

The latest version can now be found here: https://www.vound-software.com/whitepapers-studies-resources#resources. See "Export to Intella".

 

Note that Intella's indexing abilities have grown significantly since this script was made, so most users don't need it anymore.

[timothytan@nexiats.com.sg]

The latest version can now be found here: https://www.vound-software.com/whitepapers-studies-resources#resources. See "Export to Intella".

 

Note that Intella's indexing abilities have grown significantly since this script was made, so most users don't need it anymore.

 

Thank You! Christiaan Fluit

 

Best Regards