"Open In External Application" - Modifying a PDF and saving it back

[Simon Céré]

Hi,

Is it possible to open a PDF using the "Open In External Application" function, modify the PDF (e.g. by adding sticky notes, stamp, or anything else) and save it back to Intella replacing the original version?

Thanks,

Simon Céré

[Mateusz]

Hello Simon,

From my experience, whenever you try to save the pdf after changing it, it will always ask you to save the file in a new location.

[Simon Céré]

Thanks Mateusz for your response.

Like for instance, when I open a PDF from Intella using "Open In External Application" it gets created here:

If I modify the PDF while open in external application, it is saved at the same place with same name. Is there a way to replace the opened PDF with the one created\modified there? Or is the only way for me is to save that modified PDF at the source location and then re-index? 🤪

[jon.pearse]

Hi Simon,

The answer to your question is no and it is because it work like this. When you open with the external app, Intella will export the file from the original evidence source and it will be opened it in its native application (e.g. outside of Intella). Once you have made changes, the external app will ask you to save the file and to choose a file location. That is also outside or, and independent of Intella. The only way to get the file back into Intella is to index it as a new source. There is no file replacement feature in Intella at the moment, but that is on the road map to be added. 

[Lautaro]

To be able to do that, I think, would contradict the very purpose of a forensics APP. Investigators are not supposed to alter evidence in any way. 

[Simon Céré]

@Lautaro Yes that's true it would contradict that purpose. I was trying to find creative way to use Adobe redaction tools that are not available in Intella, but without doing this work outside of it 🤪