The RegRipper Launcher EnScript does just that, launches RegRipper directly from EnCase. Select the desired registries in EnCase, run the RegRipper Launcher from the EnScript drop down and view the results in console mode and/or Word. You can also bookmark your findings.
Using this EnScript you will no longer have to export "ntuser.dat" files and remember who was the owner of this registry. Just check all "ntuser.dat" files, run the script and check results or bookmarks. This EnScript will automatically adapt itself to any new RegRipper plugins you may install.
Category: Registry
Category URL: http://www.dfir.training/component/mtree/forensic-utilities-windows/registry?Itemid=
