Anyone see this? Am I missing something? I am on my first big investigation with Encase 6 and for some reason when I run a keyword search it doesn't show up in the lower right hand corner of the Encase interface as if it's queued up…I have a lengthy verification going on presently of 21 images after I loaded them into my case. What is causing this? I'd like to do a search while the verification is finishing…
I wouldn't plan on doing anything with 21 image sets verifying. I'd let that finish first.
Thanks…I figured maybe that was the reason the search (1 keyword on one image) wasn't showing up in queue…just looked at the EnCase process and it's using over 950MB of ram out of my 2GB of ram…
My .02… Be very careful when running multiple images and verifying or running keywords all at once. I have had systems of mine, all of which have had atleast 4 gigs of ram crash due to overload.
Boy I was so young back then…LOL
Now I take my time and read ForensicFocus while waiting 😉