So are you saying that you believe the information is there, but the EnCase script is not finding it? I don't know of any application like that offhand. Have you tried checking the Guidance Software message boards?
-----Original Message----- From: Greg Kelley [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 05, 2006 12:21 PM To: [email protected] Subject: Reading Active Directory Database Has anyone found an application that allows one to read the entire Active Directory file (NTDS.dit) from a Windows 2000 (or 2003) server? I know that Encase has a script to perform this function, but I believe it is missing information in the case I am working on. Greg Kelley, EnCE Vestige Digital Investigations Computer Forensics | Electronic Discovery | Corporate Surety 46 Public Square, Ste 220 Medina, OH 44256 (330)721-1205 x5432 (330)721-1206 Fax http://www.vestigeltd.com -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.9.8/380 - Release Date: 6/30/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.9.9/382 - Release Date: 7/4/2006
