Description

This script adds right-click context-menu options allowing the examiner to view the highlighted item using the default Windows viewer for the file-type concerned.

In order to achieve this, the script will extract the item's data to a temporary file in the Viewer Plugin sub-folder of the current case's temporary folder. The file-name used for this purpose will be the item GUID.

The script provides an option allowing the extension of the extracted item to be changed, which may be beneficial in certain cases. For example:

  • Some applications won't open a file that doesn't have a recognized extension.
  • If a file doesn't have an extension, Windows will not know which application(s) can be used to open it.

If the latter of these examples applies, the script will suggest an extension provided that signature analysis has already identified the file's type. In such cases, the extension provided will be the first listed in the File Types table for the file-type in question.

The plugin also allows highlighted data to be extracted and viewed in a similar manner. This is useful when viewing embedded data that cannot be rendered sufficiently by EnCase's bookmark-decode feature, e.g., HTML data.

Note that the temporary files created by the script will need to be removed manually.

This script was developed for use in EnCase training. For more details, please click the following link:

Releases

Release
Date
Windows Quick View Plugin 3.0
Jan 18, 2024
More info Less info
Product compatibility
Version 22.3 · 22.4
Version 23.2 · 23.3 · 23.4
Version 22.3 · 22.4
Version 23.2 · 23.3 · 23.4
Release notes

This version adds support for embedded data.

Languages
English

Unsubscribe from notifications

You are receiving release updates for this item because you have subscribed to the following products:
If you unsubscribe, you will no longer receive any notifications for these products.
Tip: to update your subscription preferences, go to Manage Subscriptions from your Dashboard, uncheck the products you no longer want to receive notifications for, and click 'Save'.

Marketplace Terms of Service

In order to continue, you must accept the updated Marketplace Terms of Service
Since you are downloading an app from the OpenText Marketplace, you need to accept the updated Marketplace Terms of Service before you can continue. Use the link to review the Marketplace Terms of Service. Once complete check the, "I accept the Marketplace Terms of Service" box below and click accept to continue your download.


Your download has begun...

Your download has begun

Related content and resources

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2024-1-1-5922 | Wed Jan 17 03:07:51 PST 2024