Solution Guide

58 Ingest
3 In the Case Log Options window, select the set of options you want to
change:
• Case and evidence events
• Error messages
• Bookmarking events
• Searching events
• Data carving/Internet searches
• Other events
4 In the Processes to Perform window, select the processes you want to
conduct. Select the
Processes from the following options:
• MD5 Hash
• SHA1 Hash
• KFF Lookup
• Entropy Test
• Full Text Index
• Store Thumbnails
• Decrypt EFS Files
• File Listing Database
• HTML File Listing
• Data Carve
• Registry Reports
5 Click Next .
6 From the Refine Case window include or exclude different types of data
from your case. Pre-configured options include five common requirements:
• Include All Items
• Optimal Settings
• Email Emphasis
• Text Emphasis
• Graphics Emphasis
7 Click Next