Hello, I'm trying this as a alternate Support method.
We are trying to use the EnCase App Central EnScript Yara Scanner from Simon Key in EnCase Investigator version 23.4 to scan files in an acquired drive image Evidence for the Indicators Of Compromise (IOC) specified in a Yara file. Â
https://security.opentext.com/appDetails/yara-scanner
EnCase Support says they do not support this user created and submitted EnScript. They say obtain support from Simon Key in the EnCase forums. I have tried that and we are awaiting any responses.
Other Topics or articles I've found on the EnCase Support Forms related to Assembly Failed To Load do not provide the information I'm looking for.  They do lead me to believe that either we are missing a component or need to move the DLL files to a location where they can be found.
Error received:
"C:\Program Files\EnCase23\EnScript\Yara Scanner (V1.0.0)\Yara Scanner (V1.0.0).EnPack (1): Assembly "YaraFactoryClass.dll" failed to load"
The Yara Scanner files are stored and ran from here:
C:\Program Files\EnCase23\EnScript\Yara Scanner (V1.0.0)
Is there a different folder they should be in?
Is there a component we need to also load?   What and how?
Â
Any help would be appreciated!
Â
Thank you!
Â
This question was answered on the OpenText EnScript Forum.
The solution was to unblock the script's DLL files using the Windows Explorer property dialog.
Best.