Hey guys, I am doing an exam, and for some reason I can not get EnCase to show the contents of a file (.txt in this case) inside the EnCase report. This has happened before, and it is infuriating.
The Show Contents checkbox is ticked, and there is no great difficulty in the file types, as I mentioned. So, I can not imaging why it isn't displaying.
This has occurred for bookmarks related to previewed (but still attached) evidence, as well as adding a file as 'Single Files'.
No, I am not using EnCase 7.
Thank you for any help.
Are you using a sweeping bookmark or a file bookmark ?
Are you using a sweeping bookmark or a file bookmark ?
Sorry, I am using notable file and file group bookmark.
Encase only shows a preview of an image (picture) in the report. If the item is of any other type the report will show the metadata only, unless you use the doc tab (pn the view pane) and bookmark the document as image (right click on the view pane).
A sweeping text bookmark will also show the actual bookmarked contents in the report!
Well, I can't say if you are right or wrong on the cause, but you at gave me the workout I need. I never knew you could do that. Many, many thanks.
One piece of info I forgot. This problem did occur using images even. I was previewing some evidence, evidence still plugged in, and the bookmarked images would not show.