Reviewer Manual

• 1. An introduction to Intella Connect
  • 1.1. Supported web browsers
  • 1.2. Feedback
• 2. Working with Intella Connect
  • 2.1. Getting started
  • 2.2. Overview of the Intella Connect case reviewing interface
• 3. Views
  • 3.1. Dashboard view
  • 3.2. Search view
  • 3.3. Review view
    • 3.3.1. Batches List View
    • 3.3.2. Coding View
  • 3.4. Exports view
• 4. Insight view
  • 4.1. Evidence
  • 4.2. Types
  • 4.3. Custodians
  • 4.4. Internet Artifacts
  • 4.5. Timeline
  • 4.6. Identities
  • 4.7. Notable Registry Artifacts
    • 4.7.1. Supported registry hives
    • 4.7.2. Operating system information
    • 4.7.3. Time zones
    • 4.7.4. User accounts
    • 4.7.5. Network interfaces
  • 4.8. Network connections
    • 4.8.1. USB mass storage devices
    • 4.8.2. Recent files
    • 4.8.3. Shellbags
    • 4.8.4. Typed URLs
  • 4.9. Devices
  • 4.10. Networks
  • 4.11. Significant Words
  • 4.12. Workflow
• 5. Keyword search
  • 5.1. Search options
  • 5.2. Search query syntax
    • 5.2.1. Use of multiple terms (AND/OR operators)
    • 5.2.2. Minus sign (NOT operator)
    • 5.2.3. Phrase search
    • 5.2.4. Grouping
    • 5.2.5. Single and multiple character wildcard searches
    • 5.2.6. Fuzzy search
    • 5.2.7. Proximity search
    • 5.2.8. Field-specific search
    • 5.2.9. Special characters
    • 5.2.10. Regular Expressions
• 6. Working with facets
  • 6.1. Available facets
    • 6.1.1. Saved Searches
    • 6.1.2. Features
    • 6.1.3. Tags
    • 6.1.4. Custodians
    • 6.1.5. Location
    • 6.1.6. Email Address
    • 6.1.7. Phone Number
    • 6.1.8. Chat Account
    • 6.1.9. Recipient Count
    • 6.1.10. Date
    • 6.1.11. Type
    • 6.1.12. Author
    • 6.1.13. Content Analysis
    • 6.1.14. Keyword Lists
    • 6.1.15. MD5 and Message Hash
    • 6.1.16. Item ID Lists
    • 6.1.17. Language
    • 6.1.18. Size
    • 6.1.19. Duration
    • 6.1.20. Device Identifier
    • 6.1.21. Export Sets
  • 6.2. Including and excluding facet values
    • 6.2.1. Including a facet value
    • 6.2.2. Excluding a facet value
• 7. Cluster map
  • 7.1. Understanding a Cluster Map
  • 7.2. Working with the Cluster Map
    • 7.2.1. Removing result sets
• 8. Details panel
  • 8.1. List view
  • 8.2. Hit Highlighting performance with List View
    • 8.2.1. Foreword
    • 8.2.2. Turning off Hit Highlighting completely
  • 8.3. Table view
    • 8.3.1. Adding and removing columns
  • 8.4. Thumbnails view
  • 8.5. Content analysis
• 9. Previewing results
  • 9.1. The Toolbar
  • 9.2. Tabs
    • 9.2.1. Contents
    • 9.2.2. Preview
    • 9.2.3. Headers
    • 9.2.4. Raw Data
    • 9.2.5. Properties
    • 9.2.6. Attachments
    • 9.2.7. Thumbnails
    • 9.2.8. Tree
    • 9.2.9. Entries
    • 9.2.10. Comments
    • 9.2.11. Words
    • 9.2.12. Actions
    • 9.2.13. Redaction
• 10. Tagging
  • 10.1. Tagging in the main window
    • 10.1.1. Adding tags
    • 10.1.2. Removing tags
  • 10.2. Tagging in the Previewer
  • 10.3. Automatic tag inheritance
  • 10.4. Pin a tag to a button
  • 10.5. See all tagged items
  • 10.6. Searching with tags
  • 10.7. Deleting a tag
• 11. Batching and Coding
  • 11.1. Background
  • 11.2. Coding Layouts
  • 11.3. Creating a Coding Layout
  • 11.4. Creating batches
  • 11.5. Assigning batches
  • 11.6. Working with Coding View
    • 11.6.1. Items List
    • 11.6.2. Simplified Previewer
    • 11.6.3. Coding Panel
  • 11.7. Read Only Mode for batches
  • 11.8. Keyboard shortcuts
  • 11.9. Best practices
  • 11.10. Advanced topics
    • 11.10.1. Re-using Coding Layouts in other cases
    • 11.10.2. Default Coding Layout
    • 11.10.3. Computing batch progress
• 12. Exporting
  • 12.1. Exporting a list of results
    • 12.1.1. Export formats
    • 12.1.2. Export templates
    • 12.1.3. Suppressing irrelevant items
    • 12.1.4. Export sets
    • 12.1.5. PDF file options
    • 12.1.6. File naming and numbering (original format, PDF, load files)
    • 12.1.7. PDF rendering options (PDF, load files)
    • 12.1.8. PST options
    • 12.1.9. iBase and Analyst’s Notebook options
    • 12.1.10. Load file options
    • 12.1.11. Headers and Footers (PDF, load files)
    • 12.1.12. Redacted items
    • 12.1.13. Creating a report
    • 12.1.14. Skipped items
  • 12.2. Exporting to a CSV file
  • 12.3. Exporting queries
• 13. Redaction
  • 13.1. Workflow
  • 13.2. Redacting an item
  • 13.3. Exporting
  • 13.4. Mass redaction
  • 13.5. Redaction Profiles
  • 13.6. Caveats
• 14. Activities
• 15. Instant Messaging
  • 15.1. Instant Messaging panel
  • 15.2. Sharing of queries
• 16. Preferences
  • 16.1. Global preferences
  • 16.2. Coding Layout preferences
  • 16.3. Background tasks
    • 16.3.1. Thumbnails pre-generation
    • 16.3.2. PDFs pre-generation