Jump to content

Chris

Administrators
  • Posts

    195
  • Joined

  • Last visited

  • Days Won

    8

Chris last won the day on July 8 2019

Chris had the most liked content!

About Chris

Profile Information

  • Gender
    Male
  • Location
    Utrecht, The Netherlands

Recent Profile Visitors

1,305 profile views

Chris's Achievements

Newbie

Newbie (1/14)

  • First Post Rare
  • Collaborator Rare
  • One Month Later Rare
  • One Year In Rare
  • Week One Done Rare

Recent Badges

10

Reputation

  1. Hello Phillip, Yes, this is certainly possible. The Intella 2.4.2 User Manual, section 26.5 ("Exporting to an Intella case"), explains how a set of items can be exported to another case. When you do this with all items in the source case, you are effectively merging the two cases. For safety, you may want to create a copy of one of the cases and then export the other case to that copy. Should anything go wrong, your original cases will then not be affected by it. Furthermore, we are currently working on compound case functionality. Whereas case merging/exporting actually merges the case databases (costing time and disk space), the new compound case functionality creates a light-weight case in which two or more cases are virtually and instantaneously merged. This functionality will become available later this summer.
  2. Vound is pleased to announce the official release of Intella and Intella Connect 2.4.2. Intella and Intella Connect 2.4.2 are available from the Support section on the Vound website, after logging in with your Dongle ID and organization name. Users with a 2.3.x license need to use the Dongle Manager to update their dongle to the 2.4.x license. Please read the Release Notes before installing or upgrading, to ensure you do not affect any active cases. Highlights Added support for X-Ways images (CTR and E01 files). Added the ability to edit source settings. Added a case log analysis utility, providing instant insight into common case errors. Added support for displaying HEIC/HEIF images. IntellaCmd.exe can now handle keystore information. Faster creation of ICF files.
  3. Vound is pleased to announce the official release of Intella and Intella Connect 2.4. Intella and Intella Connect 2.4 are available from the Downloads section in the Vound Support Portal, after logging in with your email address and password. Users with a 2.3.x license need to use the Dongle Manager to update their dongle to the 2.4 license. Please read the Release Notes before installing or upgrading, to ensure you do not affect any active cases. Highlights Added support for indexing AFF4 and VHDX files. Added support for Volume Shadow Copies (VSS) data. Considerable improvements in indexing MS Exchange EDB files. Added support for Oxygen 12 and 13 reports. Added detection of near-duplicates. Sources can filter on file type, reducing indexing time and disk space used. Cloud sources can filter by date range, reducing the acquisition time needed. Added custodian-based deduplication and family-based deduplication. Added highlighting and listing of Content Analysis entities in the Previewer. Performance and scalability improvements across the board.
  4. Hello, We certainly plan to look into that export connector. At the moment I cannot predict when that will be available though.
  5. Vound is pleased to announce the official release of Intella and Intella Connect 2.3.1. Intella and Intella Connect 2.3.1 are available from the Downloads section in the Vound Support Portal, after logging in with your email address and password. Users with a 2.2.x license need to use the Dongle Manager to update their dongle to the 2.3.x license. Please read the Release Notes before installing or upgrading, to ensure you do not affect any active cases. Highlights Index BitLocker disk images, APFS file systems and Slack exported content. Added hash-based filtering of items during indexing, e.g. for DeNISTing. Added a top-level Errors tab, giving an overview of all indexing errors. Added colored tags. Improved Includes functionality. Several improvements to the Keywords tab, including new export options. Added redaction templates and text overlays. Added Custom ID and Custom Family ID columns.
  6. Thank you for your feedback on this. In Intella 2.3 we moved management of the memory settings from the .l4j.ini files to the case preferences, where they are edited via the Case Manager. Among the reasons to do so is the fact that the settings that are required to successfully index, or even open, a case may (also) be data dependent, e.g. related to the number of items, or the presence of files of a specific nature such as MS Exchange EDB files. Such memory settings need to travel with the case when it is migrated to a different machine, or when it is picked up by Intella Node. Furthermore, the old settings had to be repeated for every new Intella installation on that machine, as well as on other machines. End users may even lack the permission to alter the .l4j.ini files on their machine. Nevertheless, you are totally right in that the system used to open the case is also a major factor, especially when it comes to crawler settings. We are anticipating future enhancements to memory management, including system-specific preferences/upper limits, and sanity checks on the stored values w.r.t. the machine the case is currently opened on.
  7. Hello, You can indeed do a search like e.g. "car NOT path:car", but a drawback is that items that have a hit for "car" in another field besides the path field are then also excluded. What I suspect you really want is to simply ignore the text in the path field. Fortunately, the Keyword Lists does take into account the search options selected in the Keyword Search panel. You can simply unselect the Path field there. Note that in Intella 2.3 we added a separate "File name" field. Depending on your situation, you may want to uncheck that one as well. We plan to give the Keyword Lists facet its own search options list in a future version, to make this type of control more apparent.
  8. Hi, Selective re-indexing is indeed on our roadmap. I see how the change in how items are merged into a case makes sense and how that can be used as a workaround in the interim, so definitely worth looking into!
  9. Hello Bryan, Please try running the installer like this: setup-intella...exe /S It will run the installer in the background and install Intella in the default location. Some windows will still briefly open and close when certain settings are made, but no user interaction is necessary. Note: we have not tested this switch a lot and therefore we do not officially support it. It worked fine on my system though and I am quite confident that it will work on other systems.
  10. Hi Bryan, What's in the User Manual is all the documentation that we have on it. Please do make sure you use version 2.2.1, as it contains improvements in both documentation and software. That said, with every release we make significant adjustments to the documentation, based on the questions that we receive. So please do ask!
  11. Hello Bryan, Good to hear that you're up and running! Your output indicates that it is now indexing successfully. The "Product license not found" message seems to be a side-effect of how IntellaCmd currently checks for a license. It first looks for an Intella TEAM Manager license, and if that is not available, it will look for an Intella Professional license. This message seems to be a misleading logging statement resulting from it not finding a TEAM Manager license in your case. I'll see to it that that logging statement gets removed.
  12. Hello Bryan, It should certainly work with that product. Can you tell us: The command-line invocation that you use? You can redact e.g. folder and evidence names, this is only about the options that you use. The full output of the process, as visible in the console.
  13. Hi Bryan, Can you try launching the regular Intella? Does it start at all? If so, what product name is stated at the top of the Case Manager window (e.g. "Intella Professional")?
  14. Vound is pleased to announce the official release of Intella and Intella Connect 2.2.1. Intella and Intella Connect 2.2.1 are available from the Downloads section in the Vound Support Portal, after logging in with your email address and password. Users with a 2.1.x license need to use the Dongle Manager to update their dongle to the 2.2.x license. Please read the Release Notes before installing or upgrading, to ensure you do not affect any active cases. Highlights Added a Welcome tab. Improvements supporting the large-scale redaction of items, such as queuing items for redaction based on their keyword hits, pre-generating redaction PDFs to speed up the Redaction tab’s loading time, redacting entire page ranges, and the automatic redaction of duplicates. Reorganized the right-click menus in the Table and other components. Several facets load faster. Many indexing and OCR improvements.
  15. Hello Jonas, Great to hear that the collection with two-factor authentication went smooth. I take it that you are referring to the iMessage items that are stored in the iCloud account, right? This is a recently added iOS feature that we do not support yet. It is on the roadmap though.
×
×
  • Create New...