18. Case Processor - Find Protected Files

• At the bottom right corner, click EnScript -> Forensic -> Case Processor -> Information Finders

• Choose the Bookmark folder name.

• Double-click Find Protected Files to select the desired file types.

• When dialog box opens, checkmark the case name.

• The script creates bookmarks for encrypted files, such as Office, ZIP, etc.

• Use Report view to interpret the bookmarked results.

• You can also highlight the bookmark and instantly switch to Entries; this will show you the location of the actual file. Sometimes it may be an email attachment, which may appear to be inside a compund file, such as DBX.