Mark emails from se...
 
Notifications
Clear all

Mark emails from search hits on Encase 7

3 Posts
3 Users
0 Likes
679 Views
(@dmarques)
Posts: 1
New Member
Topic starter
 

Hi,

I have a PST file for analysis and I have loaded my PST file into Encase 7, created a Logical evidence file and loaded the LEF into my case.
Then I created my keywords and Processed the case with keyword searching. Now I got my search hits. But now I need to mark the emails where those search hits occur, so I can export those emails as MSG files for analysis by the legal team.
But I can’t see any option that allows me to mark the emails so I can extract them.
As anyone faced this problem and knows how can I do that?

Thanks in advance

 
Posted : 18/12/2017 10:42 pm
nightworker
(@nightworker)
Posts: 134
Estimable Member
 

You need to use tag file option

 
Posted : 19/12/2017 11:19 am
(@bntrotter)
Posts: 63
Trusted Member
 

What exact version are you running. I can blue check emails fairly easily. You may need to re-parse your evidence files with earlier 7x versions. Or close out all tabs except the Evidence tab to refresh Search hits.

You can see the overall structure of the PST within the Records tab.

Did you go to Search tab > Keywords sub-tab? Then select the keyword to be searched?

You can then generate a Result for each Keyword then go to the Results tab to combine Keyword results.

 
Posted : 19/12/2017 2:39 pm
Share: