±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35734
New Yesterday: 1 Visitors: 95

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Condition in Encase to Retrieve Google Extension IDs

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

msogard
Newbie
 

Condition in Encase to Retrieve Google Extension IDs

Post Posted: Apr 04, 19 13:44

Has anyone created a condition that would filter out file or folder names that are less than a certain number of characters in Encase here? I'm attempting to make a better condition in Encase 8.07 to easily list the folder names of Google Extension IDs. Right now I have a condition where if it is a folder and the FullPath Contains AppData\Local\Google\Chrome\User Data\Default\Extensions, it shows up in the filter. This does work, but I get all the subfolders in the extensions that I don't need. I just want a list of the Google Extension folders themselves so I can see which extensions the user has installed. Is there a way to do this that I'm not seeing?  
 
  

MGar
Newbie
 

Re: Condition in Encase to Retrieve Google Extension IDs

Post Posted: May 12, 19 12:59

I've been an EnCase user for years and I discovered Open Text is providing less support than Guidance Software. You may want to contact them with your dongle serial number and see if they created a condition or script.  
 

Page 1 of 1