I'm looking for a GREP REGEX for EnCase
03/03/02 @ 10:00:00
The point is looking for files that were created on that date.
Late comer to the the question, but here is an answer. EnCase uses a modified form of RegEx. It has the basics, but doesn't support many of the advanced features.
That said, I am not really sure what exactly you are trying to search. If you are looking for files created on this date, you would use a condition instead. Searching for the text of the date that you gave will only find textual references to this date. The records from the $MFT file hold the date value in hex of the windows FILETIME format. A GREP keyword search would need to search for the hex form instead of the text form.
Alternatively, you could just double click the Created Date column header to have EnCase sort on that column. You could then scroll down to the appropriate range of dates.