This script is designed to extract selected folders in the current view to a nominated export folder.
Only folders that contain one or more child objects will be processed. Files themselves will not be extracted.
The script does not account for sibling folders that have the same name. This can occur when deleted folders have been recovered.
The script also doesn't account for macOS/iOS files that are blundles, i.e., those contained in a folder.
MacOS/iOS files with incompatible file-name characters, e.g., the forward slash, will not be extracted.
Multiple evidence-items can be processed by selecting them in the evidence-list and using the Open option to bring them into the current view.
The examiner is advised to check the console for warnings indicating failed output.
For additional information, please see the folllowing Twitter post:
This script was developed for use in EnCase training. For more details, please click the following link:
733 items
1 item
13 item
235 item
9 item
88 item
211 item
11 item
169 item