±Forensic Focus Partners
|New Today: 0||Overall: 35520|
|New Yesterday: 1||Visitors: 133|
Back to top Skip to content Skip to menu Back to top Back to main Skip to menu
Condition in Encase to Retrieve Google Extension IDs
Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Has anyone created a condition that would filter out file or folder names that are less than a certain number of characters in Encase here? I'm attempting to make a better condition in Encase 8.07 to easily list the folder names of Google Extension IDs. Right now I have a condition where if it is a folder and the FullPath Contains AppData\Local\Google\Chrome\User Data\Default\Extensions, it shows up in the filter. This does work, but I get all the subfolders in the extensions that I don't need. I just want a list of the Google Extension folders themselves so I can see which extensions the user has installed. Is there a way to do this that I'm not seeing?
I've been an EnCase user for years and I discovered Open Text is providing less support than Guidance Software. You may want to contact them with your dongle serial number and see if they created a condition or script.