> For the complete documentation index, see [llms.txt](https://wongkenny240.gitbook.io/computerforensics/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wongkenny240.gitbook.io/computerforensics/encase/enscript.md).

# EnScript

## Enscript Help Function

![Enscript Help](/files/-LbWq3knMzmpVOXoK4Yv)

![Help Window](/files/-LbWr2wQZ-GLrjWDnrjh)

![Code Example](/files/-LbWr4cFIBlzIW1TaSx2)

## Enscript Shortcut Key

* Run – F5&#x20;
* Undo – Ctrl-Z

## Entry Class

* Evidence Name: EvidenceFile()&#x20;
* Unique Name: UniqueName()&#x20;
* Description: Description()&#x20;
* Original Path: OriginalPath()&#x20;
* Size: PhysicalSize()&#x20;
* Extent Count: ExtentCount()&#x20;
* True Path: TruePath()&#x20;
* Short Name: ShortName()&#x20;
* Name: Name()&#x20;
* Extension: Extension()&#x20;
* Full Path: FullPath()&#x20;
* Path: Path()&#x20;
* IsSelected: IsSelected()&#x20;
* IsDeleted: IsDeleted()

## Case Class

| Name              | Type               | Allow Set | Description                                                                                                                                                      |
| ----------------- | ------------------ | --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| BookmarkRoot      | BookmarkClass      | No        | Tree of the case's bookmarks.                                                                                                                                    |
| CaseFolder        | String             | No        | Path to folder containing the .case file (see also Path).                                                                                                        |
| CaseInfoRoot      | CaseInfoClass      | No        | Top level object of the Case Information.                                                                                                                        |
| EmailFolder       | String             | No        | Path to email folder in CaseFolder.                                                                                                                              |
| EvidenceRoot      | EvidenceClass      | No        | Evidence in the case                                                                                                                                             |
| ExportFolder      | String             | No        | Returns the default export folder                                                                                                                                |
| GUID              | GUIDClass          | Yes       | Globally unique identifier                                                                                                                                       |
| HasBookmarkList   | uint               | No        | Return 1 if the case has bookmark items, 0 for no items.                                                                                                         |
| HasCaseInfoList   | uint               | No        | Return 1 if the case has case info items, 0 for no items.                                                                                                        |
| HasEvidenceList   | uint               | No        | Return 1 if the case has evidence items, 0 for no items.                                                                                                         |
| HasSecureList     | uint               | No        | Return 1 if the case has secure storage items, 0 for no items.                                                                                                   |
| HasTagsList       | uint               | No        | Return 1 if the case has tags available for use, 0 for no tags.                                                                                                  |
| HasTagViewsList   | uint               | No        | Returns 1 if the case has tags defined, 0 for no tags.                                                                                                           |
| Path              | String             | No        | Path of the .case file.                                                                                                                                          |
| PrimaryEvFolder   | String             | Yes       | Returns the primary evidence cache folder                                                                                                                        |
| SecondaryEvFolder | String             | Yes       | Returns the secondary evidence cache folder                                                                                                                      |
| SecureStorageRoot | SecureStorageClass | No        | Top level object of the secure storage tab.                                                                                                                      |
| TagCountViewRoot  | TagCountViewClass  | No        | Allows you to loop through the TagCountViewClass objects in the case, which give you the name of each tag and the count of items which currently carry that tag. |
| TagItemRoot       | TagItemClass       | No        | Top level object of tags list.                                                                                                                                   |
| TemporaryFolder   | String             | No        | Path to temp folder in CaseFolder.                                                                                                                               |
| UseBaseFolder     | bool               | Yes       | Use base case folder for primary evidence cache. Overrides primary evidence folder settings                                                                      |

## ItemIterator Class

```
for (ItemIteratorClass iter(c, NOPROXY, CURRENTVIEW_SELECTED); EntryClass e = iter.GetNextEntry();){
    ProcessEntry(c, e, logfile, datestring);
}
```

Select Entry Items to loop

| Name                    | Value | Description                               |
| ----------------------- | ----- | ----------------------------------------- |
| ALL                     | 0     | All items in the case                     |
| TAGGED                  | 1     | Tagged items                              |
| RESULT                  | 2     | Items in a named result set               |
| CURRENTVIEW             | 3     | Items in the current user view            |
| CURRENTVIEW\_SELECTED   | 4     | Selected items in the current user view   |
| CURRENTFOLDER           | 5     | Items in the current user folder          |
| CURRENTFOLDER\_SELECTED | 6     | Selected items in the current user folder |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://wongkenny240.gitbook.io/computerforensics/encase/enscript.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
