Solution Guide

88 Archive
Figure 7-1. Cross-media, Cross-case Search Capabilities of the Dell Solution
A very powerful optional search component allows information correlation
between ingested data sets. This component provides the ability to conduct
internet-like searches on the entire case data store, both of active and of online
content, as well as archived material from previous cases.
Client One-Click Archive Solution
Using the Dell Digital Forensics Solution archiving and retrieval tools, an
analyst can archive or recall both single files and entire directory structures with
the right-click of his mouse. Additional right-click commands have been added
to the NTP On-Demand Archiving software so that the user has to simply select
and archive, or select and restore data. When a file has been selected for
archiving, an additional window will appear prompting the user to confirm the
action. When confirmed, the solution will perform a background process to
move that file to either a tape device or to a near line storage device. This
process happens completely seamlessly in the background with no performance
degradation to the user’s workstation whatsoever.
When the background process has been completed, the file icon attributed to
that file will change to grey to clearly indicate to the user that the file has been
archived; but the folder and file structure are still visible so the user can easily
find the file again in the future for restoration purposes. To restore a file, the user