Direct downloads

Content

AddHash
ConTools
Spartacus
Text2Grep
EnCase scripts

Last MAC Times
MultiFile Viewer
RegistryReport Exporter

AddHash

AddHash combines multiple Guidance EnCase Hash files in a single Hash file. Duplicates will be removed, so all hash values in the new file will be unique.

Download

Version:	1.0
Last update:	04.04.2009
Installation:	None (portable)
License:	Freeware
Required:	EnCase 3.x or higher and the Visual Basic 6 Runtime DLL
Language:	English

DOWNLOAD   (RAR, 13 KB)

Support

ConTools

ConTools is a console application package with the following content:

FInfo

Shows file informations (attributes, file size, file owner, MAC times, hash values (CRC32, MD5, RipeMD160, SHA1, SHA256, SHA384 and SHA512) and the version information for executable files).

Hash

Calcualtes and displays the hash values (CRC32, MD5, RipeMD160, SHA1, SHA256, SHA384 and SHA512) for one or more files.

htGet

Gets the content of websites and shows optionally the HTTP header.

NetTime

Displays the time from a SNTP time server. The local system clock can be updated automatically.

ProcInfo

Shows detailed process, module and thread informations.

SrvInfo

Shows information about and the status of system services and device drivers. Additionally the dependencies to other services will be shown.

Trace

This is an alternate "tracert" application to trace back connections.

WhoIs

This application queries a Whois server and shows the domain and registrar informations.

Download

Version:	1.1
Last update:	09.07.2007
Installation:	None (portable)
License:	Freeware
Required:	Microsoft .NET Framework 2.0
Language:	English

DOWNLOAD   (RAR, 30 KB)

Support

Spartacus

Spartacus is a Windows service that opens a console window. This cosole window and all applications started in this console window have the user rights of "LocalSystem".

Download

Version:	1.0
Last update:	14.02.2007
Installation:	None (portable)
License:	Freeware
Language:	English

DOWNLOAD   (RAR, 11 KB)

Support

Text2Grep

Text2Grep converts a text to hexadecimal values like they are used in regular expressions. The text can be shown as Unicode hexadecimal string and can be used in EnScripts (with a double backslash).

Download

Version:	1.0.1
Last update:	16.06.2009
Installation:	None (portable)
License:	Freeware
Required:	Visual Basic 6 Runtime DLL
Languages:	English

DOWNLOAD   (RAR, 7 KB)

Support

EnCase script: Last MAC Times

This script for Guidance EnCase creates a RTF or Console report for the last file times (creation, modify and access) on all partitions of a case.

Download

Version:	1.0
Last update:	29.07.2009
License:	Freeware
Required:	EnCase 6.13 or higher
Languages:	English

DOWNLOAD   (RAR/EnPack, 16 KB)

EnCase script: MultiFile Viewer

With this script for Guidance EnCase you can open multiple files at the same time with one of the installed EnCase file viewers. The file viewer must support the opening of multiple files. The following applications on Gaijin.at can open multiple files: FileInfo, Historian, PlainEdit.NET, RegistryReport, RegistryViewer und WipeFile.

Download

Version:	1.0
Last update:	21.04.2009
License:	Freeware
Required:	EnCase 6.13 or higher
Languages:	English

DOWNLOAD   (RAR/EnPack, 18 KB)

EnCase script: RegistryReport Exporter

This script for Guidance EnCase search for Windows NT 5 Registry database files (Windows 2000, XP, Server 2003 and Vista) and shows it in a selection dialog. The selected files can be exported in an user defined folder. Additionally, these files can be opened with RegistryReport.

Download

Version:	1.0
Last update:	21.04.2009
License:	Freeware
Required:	EnCase 6.13 or higher
Languages:	English

DOWNLOAD   (RAR/EnPack, 23 KB)