Notifications
Clear all
Topic starter
29/09/2019 6:47 am
I encountered a problem when I remove a partition in EnCase, all my bookmark link stop working when I select "Go to file". But all of my bookmarks are not link to the partition I remove. Is there anyway I can remove the partition but keep the bookmark (with the links still working)?
02/10/2019 12:45 pm
The short answer, no. Bookmarks are essentially pointers to the evidence that is loaded into the case. Once that evidence is removed, the pointer and "link" is gone.
03/10/2019 6:34 pm
I'm not in a position to test this, however have you tried using a Result Set?
So similar to a bookmark, you blue check select the entries of interest then right click and create result set.
Once created they can be viewed in the Results tab.
Regards