In order to display HEIC pictures in Google Earth, the examiner must choose to convert them to JPEG, which will lengthen processing time. Note that the latter option is not possible with pictures from unallocated clusters nor pictures embedded within other files. The examiner is required to specify the path to the file when the script runs he/she can also opt to export the associated picture so that a thumbnail of it can be seen from within Google Earth. If no range is specified then every Exif picture with GPS coordinates will be placed in the 'In Range' bookmark folder.Īny GPS information found for pictures that are 'in-range' will be written to a single Keyhole Mark-up Language (KML) file that can be opened using Google Earth. The script will bookmark an Exif picture into one of three bookmark folders depending on (a) whether it contains any GPS coordinates and (b) whether those coordinates fall within the geographical range specified by the examiner. Subject to additional filtering (see below), any occurrence of an Exif picture will be bookmarked and checked to see if the data that follows contains GPS information. The examiner can choose to have the script specifically identify pictures whose Exif GPS coordinates are located within a specified distance (in kilometres) from a designated point. The console output can help you to determine these either in EnCase or, if the program crashes, using the console log-files in `%USERPROFILE\Documents\EnCase\Logs`. If this happens you will need to re-run the script without processing the problematic areas. These may contain corrupt data, which can cause the script to crash and/or cause EnCase to hang due to excessive memory usage. Note that the option to parse items that are selected in the current view does not work with records.īe careful when parsing deleted or deleted-overwritten files also areas of unused disk space. The examiner can choose to search all items, those that are selected, tagged, or those that are entries representing unallocated clusters. This script searches specified items with a view to finding Exif picture files containing Global Positioning System (GPS) data.
0 kommentar(er)
