Solution Guide

24 Triage
Configuring a Collector allows the user to determine a series of specific
filetypes or files created between a specific set of dates that the Collector will
pull from the suspect storage device for triage. The more you are able to restrict
your collection parameters, the more quickly the target data can be acquired for
review.
Dell recommends establishing a set of standard configuration profiles that you
or your agency encounter repeatedly. Examples of such standard configuration
profiles are as follows:
• Photos and Videos would capture filetypes such as *.jpg, *.png, *.swf,
*.vob, and *.wmv, which are associated with photographs, video, or other
types of visual media
• Documents would specifically collect filetypes, such as all *.pdf, *.doc,
*.docx, *.txt.
• Audio_Files would gather *.mp3, *.mp4, *.wav, and other audio files.
Configuring a Collector for Acquisition
NOTE: For an explanation of the differences between standard and live acquisition,
see "Standard vs. Live Acquisition" on page 20.
NOTE: When a Collector is configured for standard or live acquisition, it must be
cleaned before it can be reconfigured for use in the other type of acquisition.
1 From the Collector Menu , tap or click Configure Collector .
Figure 2-8. Collector Menu