±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 0
New Yesterday: 2
Overall: 24168
Visitors: 33

EnCase not showing file contents in Report

EnCase, FTK, X-Ways Forensics etc. and open source/freeware discussion. Strictly no advertising of commercial products, please.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

EnCase not showing file contents in Report

Post Posted: Sat Dec 24, 2011 11:15 am

Hey guys, I am doing an exam, and for some reason I can not get EnCase to show the contents of a file (.txt in this case) inside the EnCase report. This has happened before, and it is infuriating.

The Show Contents checkbox is ticked, and there is no great difficulty in the file types, as I mentioned. So, I can not imaging why it isn't displaying.

This has occurred for bookmarks related to previewed (but still attached) evidence, as well as adding a file as 'Single Files'.

No, I am not using EnCase 7.

Thank you for any help.  

twjolson
Senior Member
 
 
  

Re: EnCase not showing file contents in Report

Post Posted: Sat Dec 24, 2011 8:41 pm

Are you using a sweeping bookmark or a file bookmark ?  

96hz
Senior Member
 
 
  

Re: EnCase not showing file contents in Report

Post Posted: Sat Dec 24, 2011 8:44 pm

- 96hz
Are you using a sweeping bookmark or a file bookmark ?


Sorry, I am using notable file and file group bookmark.  

twjolson
Senior Member
 
 
  

Re: EnCase not showing file contents in Report

Post Posted: Sun Dec 25, 2011 4:32 pm

Encase only shows a preview of an image (picture) in the report. If the item is of any other type the report will show the metadata only, unless you use the doc tab (pn the view pane) and bookmark the document as image (right click on the view pane).

A sweeping text bookmark will also show the actual bookmarked contents in the report!  

hommy0
Newbie
 
 
  

Re: EnCase not showing file contents in Report

Post Posted: Sun Dec 25, 2011 8:25 pm

Well, I can't say if you are right or wrong on the cause, but you at gave me the workout I need. I never knew you could do that. Many, many thanks.

One piece of info I forgot. This problem did occur using images even. I was previewing some evidence, evidence still plugged in, and the bookmarked images would not show.  

twjolson
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 1