admin

Dear all, I would like to invite you to an upcoming afternoon event focused on “Forensic Searching”; with Vound’s Intella software. During this session we will discuss & show you Intella’s 1.6.3 release features & our 2013 road map including case collaboration & web-based searching. Topics covered will include: - Defining Forensic Search and why it’s so important to you in 2013. - Smart Searching Intella’s Technology Assisted review - intelligently find more evidence. - Managing TEAM web and network case collaboration…Intella in the Cloud and iPad. - Importing Cell Phone Data from XRY, Cellebrite, and Oxygen. - Working with Analyst tools such as i2 and Link Explorer. - How to index EnCase images with Intella. If you and a guest would like to attend, please RSVP via e-mail by January 11th to natasha@vound-software.com or call me at 801-704-9140. Who should attend: Forensic Examiners, Analysts, IT Managers, HR Managers, Paralegals or those involved in eDiscovery and ECA, and CIO’s responsible for maintaining network infrastructure and security. Date & Catering: January 23rd, 3:00-5:00 p.m. Drinks and hors’ d oeuvres will be provided post-presentation at The Mad Hatter, 1319 Connecticut Ave. NW, Washington, DC 20036. Spaces are limited and will be allocated on a first come basis. For any questions relating to this event, please feel free to contact natasha@vound-software.com or call at 801-704-9140.

Hi Adam, If you open a browser and type http://localhost:1947 What do you get under Products.

Hi Adam, This sounds like an AV issue. Could the Intella process or license be blocked by an AV or Firewall? AVG, Symantec are famous for this. Have you checked the install of the licence at http://127.0.0.1:1947

Hi Hagrid, My suggestion is to add the Sent date column and then sort on that column. You will then see all of the dates and times. Tag the weekends and items in the times you want. Then load that tag and review. Image attached to show how this may look...

Hi Adams, Thanks for your post. We really enjoy the feedback and discussion you have added/created on the forum. When you create a tag it automatically creates a hot-key. The first tags hot-key will be CTRL+1 the second will be CTRL+2 and so on. Hovering over the fast tags will show a tool tip with that tags hot-key. You can reorder tags by right-clicking on tag facet value and us the "Pin tag" option. The flags are a "light tag". They were the request of a number of folks who used other software. In fact when we first brought them out they work slightly differently but we were asked to change them to mirror other types of software as people were getting confused. If you highlight a number of items and right-click you can remove selected tags. Not exactly what you are asking for but does get the result. Please keep the feedback coming.

Hi All, I installed Intella on a Windows 8 64-bit computer. During the install I had one issue with the HASP dongle part of the install. I got an error similar to: Cannot install: C:\Program Files\Common Files\Aladdin Shared\HASP\vendors\88087.xml I selected ignore and Intella finished installing. When I ran Intella I got an Error 33 dialog. This is normally a sign that HASP has not cleanly installed. To get around this error I had to run the Intella installer as Admin and choose the compatibility wizard (right click on the Intella Setup file) and select Troubleshoot Compatibility > This program installed correctly on an earlier version of windows > Install as Windows 7. Intella installed fine after that.

We have a good number of test computers that we don't want rebooting half way through a test Every time I rebuild a new computer I now add the attached registry key. The key stops Windows automatically rebooting the system after a critical update. I have lost so many days of testing time thanks to a automatic reboots. This can help that. If you have any other tips please add them. Disclaimer: As usual back up, registry. More information here: http://www.faqforge....hloggedonusers/ DisableWUReboot.reg.txt

Thanks all done - was a great idea.

HI Hagrid, Thanks for the suggestion. I have taken your advice and created a sticky. Anything else I should add to the posting? http://community.vound-software.com/index.php?/topic/40-intella-latest-version/

Intella 1.6.2 available for download Posted by Peter Mercer on 10 October 2012 07:45 AM Vound is pleased to announce the official release of Intella and Intella TEAM 1.6.2. Intella 1.6.2 is available for download from the Vound Support Portal after logging in with your email address and password. It is located in the downloads section of the support page. Major highlights Improved the reporting of indexing errors. Various performance and stability improvements. An experimental 64-bit version is available on request. This version makes better use of the resources that high-end machines have to offer, such as multiple cores and large amounts of memory. You can find detailed release notes and case upgrade requirements for Intella 1.6.2 from the link below: http://www.vound-sof...lease-Notes.pdf Note: A dongle activated for 1.6 will be able to run 1.6.2. See the release notes for new dongle update features! For additional information, please contact our support department by submitting a support ticket from our website.

Check this thread to find the latest version and release notes. .

Hi WaltS We are working on the ability to have TO: FROM: CC: BCC: searches. I agree is wil be a useful feature.I would expect it to be done in 1.6.4.

Hi WaltS, Can you let us know what version you are using.?

HI llanowar, To do this we use an EnScript to strip the useful information from the image. This stops issues with filling up the index with information Intella was not designed to read and the extra time it takes to index. http://www.vound-sof...la%200.4.EnPack That said the next version of Intella will allow the ingestion of E0, L01, and DD files.

Hi Walt, it is something we may add to the 1.7 or 1.8 branch version.

Hi Walt, At the current time we do not. Maybe someone can recommend a way to convert them?

Try as we might we cannot recreate this. Are you able to send in a full screenshot of the UI. Be good to see what other settings are on that may affect this. The logs may also help.

For privacy please can you send the screenshot to support (at) Vound-software.com and not to the forum.

Hi Adam, I have a i7 with 8 gig of ram and two sata disks. I would not expect 50 gig of PST's to take more than 5-8 hours. 16 hours is at least as twice as slow as I would expect. One of the big four customers bench-marked Intella against other indexing tools and we came out ahead on the majority of test. So the speed should not be that noticeable if at all. Do you have any AV or similar that may be causing interference. Do you have a second PC you could perhaps try his on as a test? Intella was designed to run best on a mid range PC so our users could have good results on standard PC's. So it does not need to be a rocketship for the test. As far as using more RAM this will not speed up Intella. By far the biggest issue is disk access with indexing tools. If you use more RAM you just create a bigger bottleneck for the disks.

The author is on the money on how for every one real "ediscovery" job you do you will need to review many others sets of data that don't need either a full forensic review or expensive ediscovery tool. . http://www.e-discove...sic-search.html The demand for Forensic Search tools will grow fast.

Hi FDR, It is the same installer for all Intella versions. So you can do the upgrade with Intella 10. The line should read - 10, 100, 250, Intella Viewer, Intella TEAM Manager and Reviewer.

Hi Hagrid, The EnScript will export out all of the "User created" documents and files from the image (s). This includes email files, office doc's, PDF's, rtf's, images and so on... All the file types you would expect a user to have in locations like My Documents, DATA and such. These are a the file types Intella is best at reviewing.. The concept is that 95% of the time the evidence is found in a document, file or email the user has created or received. The other 5% it is a registry setting, a recovered file or some other evidence type that needs specialist software to interpret. Using a "Forensic Analysis" tool that is more designed to look at devices, link files, registry or recovery is over kill (and requires a trained user) and is not as easy or requiring as much training as using a "Forensic Search" tool like Intella. So in short, 95% of the time you can use the EnScript to export out the data and use Intella to reduce the complexity, cost and time it takes to review the data types that most often lead to the "smoking gun" . Please note the EnScript is for V6 only ATM.

Dear Walt, We have had reports of 9 TB cases that the user explained as working "in an acceptable way". However, that said, a 6 TB case is still a big case. You will need to ensure that you use the biggest and best you can afford in hardware. A fast network connection is prime if you're planning to access the case remotely. Depending on the type of data the case could be anything between fast and too slow. We are constantly trying to improve on this and we are keen to get feedback on this from the field. We'll be happy to assist on this respect. Our strong advice here would be to try a 1 TB, then 2TB, and so on to ensure you do not waste all the indexing time on one case to find it does not meet your needs. Please remember regardless of what others say they can do, 6 TB is a huge amount of data (but in 2-4 years it will be the norm ). This amount of data can throw up issues other than search speed.

A small number of users have reported a problem in Windows 7 were their Intella UI will not redraw correctly when they disconnect from a RDP session and then reconnect. We have found that this is due to a bug in Java that seems to only affect certain screen cards (GPU's) or drivers. A confirmed work-around is as follows. With Intella closed, right click on the Intella program icon. 1. Select "Property" 2. Click on "Compatibility" 3. Click on the box "Disable Visual Theme" 4. Open Intella and try connecting and then reconnecting your RDP session. Hope this helps. Report on if this works are greatly welcome.

Hi FDR, The Phone number facet became available in Intella 1.6. I note you are using 1.4.3, can I suggest moving to a new "much faster" 1.6? 1.4.3 is many versions old and near the end of life for support. Please do read the release notes before doing so. There are implications for your 1.4.3 cases. You can download 1.6 and the release notes at http://support.vound-software.com