Integrating Python With EnCase/EnScripts
Abstract
This chapter walks through the process and associated Python and EnScripts necessary to interface with EnCase v7. The scripts provided will demonstrate both the File Viewer model and the EnScript model of integration.
Keywords
EnCase; EnScript Python; Forensics; File viewer; pyBasic.py; pyEnScript.py; James Habben; Guidance Software
Introduction
EnCase by Guidance Software is a leading forensic platform used by thousands of investigators and incident response practitioners. A key element of EnCase has always included the concept of investigators and developers expanding the scope and capabilities of EnCase. Traditionally, this has been done using two basic methods:
(1) Launching ...
Get Integrating Python with Leading Computer Forensics Platforms now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.