Call : (+91) 968636 4243
Mail : info@EncartaLabs.com
EncartaLabs

OpenText EnCase - EnScript Programming

( Duration: 4 Days )

The OpenText EnCase - EnScript Programming training course introduces to the EnScript language, which is designed to allow users to fully tap into the data processing power of OpenText EnCase Forensic (EnCase), automate tasks, and create fully functional applications that can be shared with other EnCase users. The class is designed for those who have fundamental programming skills and wish to enhance their investigative techniques through the use of EnScript programming. You will learn and practice the skills needed to write intermediate-level EnScript programs that automate searching, interpretation, extraction, bookmarking, and external reporting of data encountered during the examination of computer systems.

By attending OpenText EnCase - EnScript Programming workshop, delegates will learn:

  • Working with case and local file system data
  • Using EnScript applications to bookmark data
  • Searching case data, mounting compound files, and reading XML content
  • Writing data to logical evidence files
  • Creating and using EnScript programs to read, bookmark, and interpret Microsoft Windows Registry data
  • Working with SQLite database files
  • Creating and bookmarking custom lists and result sets
  • How to create custom dialogs boxes in order to accept, validate, and process input provided by the end user

  • Familiarity with any programming language
  • Good understanding of the concepts of computer forensics and the EnCase operating environment
  • Attend a training on OpenText EnCase - Building an Investigation or equivalent practical experience
The OpenText EnCase - EnScript Programming class is ideal for:
  • Law Enforcement Officers, Computer Forensic Examiners, Corporate & Private Investigators & Network Security Personnel.

COURSE AGENDA

1

Day 1

  • Working with case data.
  • Understanding how to iterate open cases and the entries they contain.
  • Learning how to use the EnScript language to identify highlighted data within the current case.
  • Working with file data.
  • Learning to read data associated with entries and records in the current case.
  • Reading string data.
  • Writing data to the local system.
  • Opening files.
  • Creating folders.
  • Writing string data to files.
  • Bookmarking.
  • Creating bookmark folders.
  • Working with different bookmark types including note bookmarks, item bookmarks, text bookmarks, decode bookmarks and data bookmarks.
  • Bookmarking XML Data.
2

Day 2

  • Learning to create and use EnScript programs to instigate searching and bookmarking operations.
  • Working with compound files.
  • Mounting Microsoft Word docx files as collections of zipped XML streams.
  • Searching for XML values with a specific name and path.
  • Bookmarking XML data of note.
  • Working with logical evidence files.
  • Opening logical evidence files.
  • Understanding logical evidence file options.
  • Storing data in logical evidence files using a particular path.
3

Day 3

  • Examining Windows Registry data.
  • Accessing system-wide Registry hive files (SAM, Security, Software, System, etc.).
  • Reading user-specific Registry data.
  • Finding Registry data given a specific name/path.
  • Working with SQLite database files.
  • Querying SQLite data.
  • Writing SQLite data to a tab-delimited spreadsheet.
  • Creating and bookmarking custom lists.
  • Understanding and inheriting NodeClass and NameListClass to create custom lists.
  • Creating custom HandlerClass objects to bookmark custom-list data.
4

Day 4

  • Creating result sets.
  • Building dialog boxes.
  • Understanding dialog box basics.
  • Multi-tabbed dialog boxes and Wizard dialog boxes.
  • Understanding virtual methods/functions.
  • Using different dialog controls.
  • Buttons.
  • String-edit controls, path-edit controls and enumerated-value edit controls.
  • Handling events.
  • Validating user input.

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 50,000 Corporate executives across the Globe
  • All our trainings are conducted in workshop mode with more focus on hands-on sessions

View our other course offerings by visiting https://www.encartalabs.com/course-catalogue-all.php

Contact us for delivering this course as a public/open-house workshop/online training for a group of 10+ candidates.

Top
Notice
X