Knowledgebase: E3
Report - Other Evidence
Posted by Jack H. Ward, Last modified by Jack H. Ward on 26 January 2018 10:30 AM
This step allows the user to define what OLE/XDBF storage evidence, Archive evidence, or SQLite evidence will be added to the report and define their options.


OLE/XDBF storage evidence

  • Include only data checked as "Include to reports": If this option is selected, the report will include only the OLE/XDBF storage (database used in Xbox) evidence or the part of it that is checked in the Explorer pane or in the Data View pane.
  • Include all OLE/XDBF storages evidence from the case: If this option is selected, all existing OLE/XDBF storage (database used in Xbox) evidence will be included into the report.
  • Don't include any OLE/XDBF storage evidence: If this option is selected, no OLE/XDBF storage (database used in Xbox) evidence will be added to the report. This has the same effect as the first option if no OLE/XDBF storage evidence in the Explorer pane is checked.

OLE data to include:

  • Include general information: If this option is selected, then only the most general information about OLE storages (name, size, creation/modification date, etc.) will be added to the report.
  • Include all information: If this option is selected, then all information from OLE/XDBF storages will be added to the report.

Selecting this option can make the report too large.

Archive evidence

  • Include only data checked as "Include to reports": If this option is selected, the report will include only the Archive evidence or the part of it checked in the Explorer pane or in the Data View pane.
  • Include all Archive evidence from the case: If this option is selected, all existing Archive evidence will be included in the report.
  • Don't include any Archive evidence: If this option is selected, no Archive evidence will be added to the report. This has the same effect as the first option if no Archive evidence in the Explorer pane is checked.

SQLite database evidence

  • Include only data checked as "Include to reports": If this option is selected, the report will include only the SQLite evidence or the part of it checked in the Explorer pane or in the Data View pane. 
  • Include all SQLIte database evidence from the case: If this option is selected, all existing SQLIte database evidence will be included in the report.
  • Don't include any SQLIte database evidence: If this option is selected, no SQLIte database evidence will be added to the report. This has the same effect as the first option if no SQLIte database evidence in the Explorer pane is checked.


Attachments 
 
 Other Evidence.png (39.24 KB)
(0 vote(s))
Helpful
Not helpful

Comments (0)