EnCase EnScript Err...
 
Notifications
Clear all

EnCase EnScript Error: Assembly Failed To Load

3 Posts
2 Users
0 Reactions
1,086 Views
(@jcritch)
New Member
Joined: 2 years ago
Posts: 2
Topic starter  

Hello, I'm trying this as a alternate Support method.

We are trying to use the EnCase App Central EnScript Yara Scanner from Simon Key in EnCase Investigator version 23.4 to scan files in an acquired drive image Evidence for the Indicators Of Compromise (IOC) specified in a Yara file.  

https://security.opentext.com/appDetails/yara-scanner

EnCase Support says they do not support this user created and submitted EnScript.  They say obtain support from Simon Key in the EnCase forums.  I have tried that and we are awaiting any responses.

Other Topics or articles I've found on the EnCase Support Forms related to Assembly Failed To Load do not provide the information I'm looking for.   They do lead me to believe that either we are missing a component or need to move the DLL files to a location where they can be found.

Error received:

"C:\Program Files\EnCase23\EnScript\Yara Scanner (V1.0.0)\Yara Scanner (V1.0.0).EnPack (1): Assembly "YaraFactoryClass.dll" failed to load"

The Yara Scanner files are stored and ran from here:

C:\Program Files\EnCase23\EnScript\Yara Scanner (V1.0.0)

Is there a different folder they should be in?

Is there a component we need to also load?    What and how?

 

Any help would be appreciated!

 

Thank you!

 


   
Quote
Simon Key
(@sdckey)
Active Member
Joined: 15 years ago
Posts: 9
 

This question was answered on the OpenText EnScript Forum.

The solution was to unblock the script's DLL files using the Windows Explorer property dialog.

Best.


   
ReplyQuote
(@jcritch)
New Member
Joined: 2 years ago
Posts: 2
Topic starter  

@sdckey Right.  thank you!


   
ReplyQuote
Share: