• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 952
  • Last Modified:

Encase scripts to replicate SYSTEMINFO

In Encase v6 are there any of the built in (shipped with) features or scripts that will return similar info to what you'd get from a:

1) SYSTEMINFO command?

2) And also drive/volume details similar to what youd find in drive manaer on computer management console.

3) Thirdly a list of all installed software and versions?

Or any other 3rd party tool you'd run against a drive mounted using FTK imager or similar. E01 image.
0
pma111
Asked:
pma111
1 Solution
 
btanExec ConsultantCommented:
not a Enscript expert but saw blog of those saying possible to execute exe or dll from it. maybe something for consideration
@ http://codeslack.blogspot.com/search/label/EnScript

understand there is encase enterprise (chapter 12) which deploy servlets that can do Machine Survey. Furthermore, there is Enscript library that include "scan local machine". Attached a image from the document in below
@http://www.scribd.com/doc/63487563/83/Enterprise%C2%A0EnScript%C2%A0Programs

Wetstone Gargoyle is 3rd party worth checking out, they have signature to check existence of blacklist and whitelist
@ http://wetstonetech.com/cgi-bin/shop.cgi?view,2

You may also know EnCase Bit9 Analyzer which compare all volatile data such as active processes, drivers and DLLs, as well as static data, against a database of known applications.
@ http://www.guidancesoftware.com/product.aspx?B=Product&Product_S=ProductsSolutionsMenu&menu_id=66&id=350&terms=bit9

Some good doc on enscript if you want some hands-on @ http://www.lancemueller.com/blog/EnScript%20All%20tutorial%20Document.pdf

Hope it helps
449-e3a3995478.jpg
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now