Jump to content

jon.pearse

Members
  • Posts

    295
  • Joined

  • Last visited

  • Days Won

    21

Posts posted by jon.pearse

  1. Hi, I would start with the search for "contact list". I would tag the results, then run a proximity search for "wilson contact"~2 only over those results. 

    The limitation is that you could get false positives with this approach. For example, there may be a document that has the phrase "contact list", which is respondent for the first search. But, that same document may also have the word 'contact' within two words of 'wilson' (e.g. something like "I asked him to contact Wilson...."). In this case the proximity search will have a positive hit on this, but, it is not what you are looking for (e.g. "contact list" within two words of Wilson). That said, I think this situation would be very rare given what you are looking for. And. it would be easy to review such a low number of false positives if they occur.

  2. Hi Jonas, you could try this:
    1) Ingest both PST files into the same case.
    2) Search for all mail items in one of the PST files. Then, extract a list for the Message hash values of these emails.
    3) Run these has values over the second PST file.
    4) Tag the remaining emails that were not respondent to the message hash search. These are the emails which are not in the first PST.
    5) Repeat the process but, create a list from the second PST, and search across the first PST to identify the unique items in that PST.

    Please note that this is an example only. I have mentioned only messages in this workflow. You may need to include other items such as scheduling items etc. if these other items should be included. Please run quality checks to ensure that no items have been left out or unaccounted for. 

  3. Vound is pleased to announce the official release of W4 1.1.2.

    For current W4 customers, W4 1.1.2 is available from the Downloads section of our website. You will need your dongle ID to download this update. More information can be found here: https://www.vound-software.com/software-downloads

    Users with a W4 1.1.x license on their dongle can use this version. If your dongle does not have this version, you will need to update your dongle using Dongle.Manager.exe which is located in the folder where W4 is installed on your system.

    For non W4 customers, for a limited time you can get access to a fully functional copy of W4 here: https://www.vound-software.com/download-request-w4

    Please read the Release Notes before installing or upgrading, to ensure you do not affect any active cases.

    Highlights

    • Added support for X-Ways images (CTR and E01 files).
    • Added support for displaying HEIC/HEIF images.
    • Stability improvements across all components.

    Release Notes

    W4-1.1.2-Release-Notes.pdf

    For additional information, please visit our W4 website website.

  4. HI Shaun,

    Note that you can increase/decrease these amounts of memory to get to a whole number like your desired 8GB. First drag the slider, then let it go where it is close to the number which you want. Then use the right/left arrow keys to fine tune the amount. Note that you need to actually hold down the arrow key to have the number increase or decrease. In this example I get 7.03GB when I drag the slider. But, now I hold down the left arrow key and the number counts down. I stop at 7GB.

    image.png

    image.png

    • Like 1
  5. Hi Stevie,

    The safest option is to export out all of the items in the case apart from the LPP material, and load that into a new case. Note that Intella can export a selection of items into a new case. Once this is done you should run your LPP search criteria over the new case to make sure you did not accidently select any of the LPP for the export. Also, I'm not sure what the LLP requirements are, but items which are respondent to the LPP searches may also need to include families. 

    Once you have created and checked this sub case, make sure you don't re-index it on the system where the original data resides. There is no reason to re-index the sub case, but doing so when the original source is available will result in the entire dataset being included in the case again (including the LPP material). 

    image.png 

  6. Hi,

    This is probably a permission issue. Here is a list from the Admin manual. Have you set the second permission for that specific role?

    Review related permissions:
    • Can create new tags - allows users to create new tags.
    • Can edit all tags - allows users to edit tags, even if they were created by other user.
    • Can delete tags and taggings from other reviewers - users having this permission will be
    allowed to delete tags and taggings created by other reviewers. In previous versions of Intella
    TEAM, only Case Manager was allowed to do that. Now this action is available to every user
    having this permission.
    • Can manage coding layouts - allow users to create and edit Coding Layouts.
    • Cannot see items tagged with… (this one needs an extra parameter: a tag name) - this
    permission allows for hiding certain items from certain reviewers, while letting others see the
    entire data set.

  7. Hi Fabian, yes it is much the same as how it works in Intella Desktop. The Node is the processing system so it should have good resources, and the data should all be local. Once a case has been processed, you could move it to another system.

    For the evidence, you don't need to cache it into the case. For review purposes the evidence is not required. It is only required for further processing jobs (such as re-indexing the case), and exporting items from the case. If the evidence is not cached into the case and it has been moved, you can reconnect the source in the Sources tab. So yes, you can move your source to a different location, you just need to set that location in the Sources tab for that case. 

  8. Hi Fabian, you can think of Node like Intella Pro, but without a user interface. The user interface for creating cases and adding evidence to cases is built into Connect. Connect and Node work together for these functions.

    Node is the processing engine, and therefore, the most efficient way to process data in a case would be to configure the Node system like you have done for your Intella Pro system. E.g. separate local drives on the Node system for the Case, Evidence, and Optimization will provide best performance. Using SSD drives over traditional rotating platter drives would yield even more performance. Once cases have been indexed, they can be copied to the Connect system for review.

    When using hardware with ample CPU and RAM, configure the memory and crawler settings to take advantage of these resources. More info on that is here 

     

     

    I will let the technical team talk more about the role of the Optimization folder.

  9. Maybe you could first search on your tag, then open the Email Addresses facet. Open the From category to see how many emails were sent from each user. Note that the items in blue are the ones that are in your tag. You will need to use the filter option at the bottom of the facet to only show the email address respondent to your searched tag. You will need to do the same for the Senders category as well. Does this work for you?

    image.png 

×
×
  • Create New...