• Have questions about this item?

  • Contact us

Description


This plugin, which was previously called the Import Network Nodes Into EE Plugin, provides two utility functions for use with EnCase Endpoint Investigator.

Firstly, the plugin can import one or more network-nodes or IP-ranges from a nominated tab-delimited text-file in MS Windows format.

There should be one entry per line with the following fields -

  • Host-Name/Range-Name/IP-Address

  • Start-IP (range only)

  • Finish-IP (range only)

  • Comment

  • Port

The first field is compulsory; the remainder may be left blank.

The name field may take the form of a path delimited by "\" characters; this will allow the imported network nodes to be organized into a tree-like structure.

Note that it may be necessary to simulate editing one of the nodes in the resultant network layout in order for the newly imported nodes to persist. Without taking this action, refreshing the network layout will result in the newly imported nodes disappearing.

Secondly, the plugin can blue-check network nodes matching a condition provided by the examiner.

Note that:

  • Using this function will, at the very least, deselect any existing blue-checked nodes.

  • Newly checked nodes may not be visible immediately - it?s usually necessary to remove any green check and then expand/contract the network tree first. Even then, it may necessary to shift the focus to another node before the blue-checks will become visible.

  • The Update button should not be clicked as this will remove any selection made by the script or the user.

  • The Name property of each network node is stored as a string, not an IP-address. This is to allow hostnames to be stored in that field. Accordingly IP-range checking is not possible.

  • The plugin will not perform dynamic IP-lookups to determine whether the hostnames of any nodes in the tree resolve to IP addresses specified in the filter.

Please note that this help-text has been formatted using Markdown, so certain characters may have been escaped by a backslash.

This script was developed for use in EnCase training. For more details, please click the following link:

Releases

Release
Size
Date
Endpoint Investigator Network Utility Plugin 3.0.0
  |  
Aug 1, 2024
More info Less info
Product compatibility
Release notes

Tested with:
EnCase Endpoint Investigator 23.4

Languages
English
Files

Unsubscribe from notifications

You are receiving release updates for this item because you have subscribed to the following products:
If you unsubscribe, you will no longer receive any notifications for these products.
Tip: to update your subscription preferences, go to Manage Subscriptions from your Dashboard, uncheck the products you no longer want to receive notifications for, and click 'Save'.
Unsubscribe Cancel

Marketplace Terms of Service

In order to continue, you must accept the updated Marketplace Terms of Service
Since you are downloading an app from the OpenText Marketplace, you need to accept the updated Marketplace Terms of Service before you can continue. Use the link to review the Marketplace Terms of Service. Once complete check the, "I accept the Marketplace Terms of Service" box below and click accept to continue your download.


Accept Cancel
Your download has begun...

Your download has begun

Related content and resources

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2025-2-1-6322 | Wed Feb 5 16:30:41 PST 2025