This plugin allows the filtering of bookmarks.
Any bookmarks that match the condition provided by the examiner will be blue-checked. Anything else (including all bookmark folders) will be deselected. This action can't be undone.
The plugin also allows the selection of unique files by hash and duplicate files by hash.
Hashing must be performed in advance. Any bookmark that doesn't have a hash will be deselected. Again, this action cannot be undone.
This script was developed for use in EnCase training. For more details, please click the following link:
This version allows the selection of unique files by hash and duplicate files by hash.
Tested under EnCase 24.03.00.109.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox