Jump to content

PF1

Members
  • Posts

    61
  • Joined

  • Last visited

  • Days Won

    1

Posts posted by PF1

  1. Jon, much appreciated, but I am not getting the results I discussed above.  Your config appear to be renaming the files with sequential numbers, and every page of a multipage file is getting the same number.  Additionally my Intella (2.4.2) seems to be ignoring the prefix I designate. I confirmed that based on this configuration, each file, regardless of page count, get the next sequential number.  Additionally, I am unclear on what endorsement option to choose in "Headers and Footers" to get a bates label endorsement on the image.

     

    Is there a step-by-step walk through to get a bates labeled load file export?

    1582278375_Screenshot2021-10-06151954.thumb.png.d583e1acfb97861b0d04a36588d49773.png

     

  2. On 9/30/2021 at 3:45 PM, jon.pearse said:

    Hi FP1,

    Intella has all of the options which you have listed when exporting to load file format. You can also search for Export IDs in Intella. 

    Jon,  I am very happy to hear this.  I must admit, I have tried to get the result I want but have not been able to.  I checked the user manal and the forums but dont see any kind of write-up or documentation for how to creates a prefixed ("ABC000001") bates label on each page in a load file export and include this as the load file file name and also in the CSV.  Is there documentation of how to accomplish this?

  3. You bet Jon.  Most of my attorney clients require bates labels to:

    -have a predefined prefix (e.g. "ABC")

    -have a predefined number of digits backfilled with zeros (e.g. "ABC0000001") that is ultimately embossed on an exported PDF/TIFF in a load file

    -have each individual page in an item (email, document) assigned sequential bates labels

    -have child objects (email attachments) labelled sequentially directly after the parent item

    -have a load file reflect the beginning and ending bates label for an item (e.g. "BegBates", "EndBates")

    -have a load file reflect the beginning bates label of any parent/child item associated with the item 

     

    When the load file is exported, it is customary to rename the native files to the beginning bates number, and name the text extraction and PDF/TIFF with the bates number as well.  The actual file name (or email subject) is referenced in the .csv, .dat, etc... that is exported with the load file. 

     

    The bates number/range of the item would need to be recorded within the database so that it could be (a) searched for, and (b) re-applied if the item required re-production for any reason.

    Am I missing somewhere in Intella where this functionality exists?

     

    Feel free to contact me directly if there is anything else I can add.  Let me know if you need my contact info.

     

  4. Just checking in to express two wishes... One old and one new.

     

    1. Back in 2014 when I started this "V2" thread, it was to request a bump of a feature request.  That feature was the ability to highlight any number of search results in the results listing and see the total size of the selection.  Seven years later and I still have to export out a CSV and tally the total size in Excel.  

     

    2. Bates Labeling.  TRUE bates labeling.  Not page numbering with a prefix, but bates labeling that persists within the case over time.  If I need to re-produce data, it should get re-produced with the same bates label as before.  

     

    Thanks,

  5. I just assembled a new workstation and am having trouble with the Intella interface having some nasty display issues.  The new machine has an Nvidia GT1050ti video card and is using the 419.67 driver (I know it's not the newest driver, see below).  My other machine I run Intella on (older machine) has an Nvidia GTX750Ti with driver version 364.72.  Every attempt to update the older machine to newer drivers resulted in Intella issues, so I kept the old drivers in place.  

     

    On the new machine, whenever I mouse-over any interactive area of the interface, I get second and third and fourth, etc. instances of my Intella screen.

    My problem is that there is no "older driver" for the new video card, so I tried both the newest and the oldest (currently using) and have the same issues, as seen in the below screen capture of an export dialogue.  

     

    I replicated the video driver options as best I could between the two machines, but I am still having the same issues.  The old machine is W7Pro and the new one is W10Pro.

     

    Any suggestions for how to handle?  It pretty much makes Intella unusable on this machine. 

    Intella_Video.png

  6. 7 hours ago, Chris said:

    Hello,

    You can indeed do a search like e.g. "car NOT path:car", but a drawback is that items that have a hit for "car" in another field besides the path field are then also excluded. What I suspect you really want is to simply ignore the text in the path field.

    Fortunately, the Keyword Lists does take into account the search options selected in the Keyword Search panel. You can simply unselect the Path field there.

    Note that in Intella 2.3 we added a separate "File name" field. Depending on your situation, you may want to uncheck that one as well.

    We plan to give the Keyword Lists facet its own search options list in a future version, to make this type of control more apparent.

    Wow, I had NO idea the keyword list search adhered to the check boxes under the individual keyword search box.  That makes things much easier, thanks!

  7. On 3/28/2019 at 4:50 AM, ŁukaszBachman said:

    How about exporting the selection to CSV with "Size" column visible, then summing it up in a 3rd party spreadsheet editor? I think this should work fine, given that you don't need to use that feature many times per day.

    That's the thing, I DO need to use this many times per day when working a case in Intella.  Many other forensic tools allows for this (EnCase, X-Ways, etc.) and it's a really useful feature.  Otherwise, I end up having to export listings five or six times (or more) just to find out what the total resulting size of a keyword search results will be based on variances in the search term list and how the results are assembled.

     

    Since Intella is already computing the individual sizes of items in the "size" column, I guess it didn't seem like it would be all that difficult to integrate a feature that would 'sum' the size of the highlighted results.

  8. Currently, when I run a keyword search that contains more than one keyword, I need to open each resulting item in the preview to see (at the bottom of the preview) which keywords have hits in that item. 

    It would be great if a column could be added to the table view that contained any/all keywords resulting from a search.

     

    The data should be available, as the preview of each result shows the hit terms.

  9. I recently ran a keyword search across various email PSTs and was viewing the hits. Some hits were email bodies and other hits were in attachments only.  I highlighted the entire list of hit results and right-clicked and selected show parent (direct, not top level).  I then tagged all these items with the thought that any attachment would now have its parent email tagged.  I exported the tagged items as native, but there were a number of instances of where the parent email of the keyword-hit-attachment did not appear in the export.

     

    In order to test this, I found one such email/attachment.  The attachment had a keyword hit but the parent email was no included in the export.  I previewed the attachment and from the preview window (left side) selected "show parent" and sure enough, the parent email appeared.  I noted the parent email's Item ID and closed the previews.  I then selected the attachment and about 50 others as a group in the listing and right clicked -> "show parent" and the parent item ID was not in the resulting list.  

     

    Obviously, this caused a lot of concern as I am now unsure if all parent item emails are being selected when I highlight a group of keyword hit items and right click -> "show parents."  

     

    Does anyone have any thoughts on why this occurred?

     

    My goal was to export the lowest level email item possible (including any of it's attachments) for any item (be it an email or an attachment) with a keyword.

  10. I guess in the future I could select each of the individual MBOXs from the IMAP collection except the ALL MAIL MBOX, index the collection, and then add the ALL MAIL MBOX in as a second step.  Anything that was a duplicate in ALL MAIL would be duped out.

    As a workaround, I showed the "duplicates" column in the listing pane, sorted based on location and tagged for export any item in the ALL MAIL location that did not show a duplicate, but did not tag any item that did show a duplicate.  All other relevant items from other Gmail 'folders' were tagged and all tagged items were exported.

     

    • Thanks 1
  11. I am wondering if there is a way to control the order of analysis for deduplication.

     

    I frequently collect GMail IMAP accounts and find that the ALL MAIL folder generally holds a duplicate of messages located in other GMail folders (well, Gmail tags, really).  But, it is entirely possible that a user could place a message into the ALL MAIL folder on his own and it would be the only instance.

     

    What I am wondering is if there is a way to have Intella review for duplicates whereby the All MAIL folder (or any folder) is assigned the lowest priority?  Given an email that is present in ALL MAIL and also STARRED, I want the ALL MAIL version excluded and the STARRED one to remain.  However, if a message only exists in ALL MAIL, I want it included in my end result (so I cannot simply exclude the ALL MAIL folder completely).

  12. 2 hours ago, jon.pearse said:

    Hi PH1,

    You can't search over the message ID field specifically in Intella. You can only narrow your search over the message headers or Raw data. 

     

    I understand this, but in my case this does not work as I also get all OTHER messages in a conversation (since the Message-ID appears in the header of the other emails in the conversation).

     

    That's why I am posting this in the "wish list" thread.  I am hoping Vound can make the message-ID a uniquely searchable field, like some of the other specific fields that can be searched.

     

    Message hash is not necessarily unique, as the tool used to generate it may use different data to compile it (x-ways vs. Intella vs. Relativity, etc.), but the message-ID is unique to the specific email, so it would be useful to be able to search just on the message-ID.

  13. On 3/22/2018 at 12:52 PM, PF1 said:

    Wondering how hard it would be to allow the import of multiple key word lists at once?

     

    I often have numerous lists that I need to run independently of each other, and it would be nice to be able to load them all in at once instead of having to load each one individually.

    Any updates on this?

     

    I am working on a case with ~13,000 search terms, and since Intella seems to not work with a keyword list of over 200 message ID or email Subjects (error= Query is too long), I am having to break the list into 50+ small keyword lists.  It would be great if I didn't have to import each one individually.

  14. I would love to be able to search the message-ID field specifically, and do so via a keyword list.

    What I am trying to do is find specific messages, but not the messages that reference to them.

    I would like to be able to have a keyword list that looks like:

    messageID:<ABC123>

    messageID:<ABC456>

    etc...

     

    Is there currently a way to search this specific field only?

    • Like 1
  15. Jon,

     

    Since phrases are not currently supported in proximity searches (fingers crossed that's on the way!), the idea of grouping terms is intriguing.

     

    Your example of  

    "(Baxter OR Jason) (article OR paper OR presentation OR public OR report)"~20 

    only uses the OR operator.

     

    If what I needed to find was actually any item with BOTH Baxter AND Jason within 20 words of any of the others, would an AND operator in the first group suffice?:

    "(Baxter AND Jason) (article OR paper OR presentation OR public OR report)"~20 

  16. GMail API based collection request

     

    Please consider having the API based method of GMail collection maintain the gmail tag/folder structure of the collected items.

     

    Currently, this method, while VERY fast as compared to a Thunderbird IMAP client collection, strips all directory stricture of the mail.  It is often important to know if a message is in Sent, Inbox, Starred, or some custom folder.

×
×
  • Create New...