class MainClass { void Main(CaseClass c) { SystemClass::ClearConsole(); //clear the console LocalFileClass local(); // create a localfileclass variable so we can write data out to local filesystem if ( local.Open(c.ExportFolder() + "\\" + "EnCase_BodyFile.txt", FileClass::WRITE)){ // create local file local.SetCodePage(0); // set the codepage type for the output file. This will write in ASCII. forall (EntryClass entry in c.EntryRoot()){ String faccessed = entry.Accessed().GetString(); String fwritten = entry.Written().GetString(); String fmodded = entry.Modified().GetString(); String fcreated = entry.Created().GetString(); if (faccessed != "" || fwritten != "" || fmodded != "" || fcreated != ""){ String UID = "UID"; PermissionClass perms = entry.PermissionRoot(); if (perms){ foreach (PermissionClass p in perms){ if (p.Property() == "Owner") UID = p.Name(); } } Console.WriteLine ("0" + "|" + entry.FullPath() + "|" + entry.FileID() + "|" + "mode" + "|" + UID + "|" + "GID" + "|" + entry.LogicalSize() + "|" + faccessed + "|" + fwritten + "|" + fmodded + "|" + fcreated); local.WriteLine ("0" + "|" + entry.FullPath() + "|" + entry.FileID() + "|" + "mode" + "|" + UID + "|" + "GID" + "|" + entry.LogicalSize() + "|" + faccessed + "|" + fwritten + "|" + fmodded + "|" + fcreated); } } } } }