Intella

Intella is good for reviewing emails and it's indexing engine is fast. Visualization is nice, but may be confusing a bit. The only criticism would be its reporting features. Personally, I spent to much time on trying to get reports the way I like, having all emails and it's attachments correctly displayed and sorted. As a result, I am more often use FTK 3 to work with emails.

Intella has pretty good training video material that should get you up and running fairly quickly, which is a big plus, especially when you have several investigators/examines to train up.

Hope this helps,

We've been using Intella for about a year now, it is pretty good for searching etc. although the indexing can sometimes take quite a long time, guess it depends on how much you are trying to process….

That said it makes it easier to combine multiple PSTs or export a subset of emails in to a new one etc. etc.

Support seems pretty good too, they're pretty responsive.

Thanks. Had a quick go on the demo version, pretty impressed. The graphical relationship-display looks nice but seems more of a gimmick to me than something of real benefit; would be much more useful if that space was taken with a file viewer akin to EnCase/FTK, etc.

I found that the graphical interface was pretty good at quickly getting some types of information. E.g. If you have a result set with multiple people sending emails to each other you can easily tell the dominant source.

I agree with your point about the file viewer though, having played a bit with Nuix 3 the new layout with the file viewer in it is a nice feature to have.

All up when I was using Intella I thought it was a good alternative to Nuix.

We have been using it for about six months and it has to be said it is not really a forensic tool but an investigative tool. Of which it does a very good job. I would say it is well worth it's money and empowers the Investigating Officer once the forensic people have done their bit.

Have to agree about the file viewer part but it must be stressed it is not a forensic tool but the Intella installation could sit well on a workstation with something like QuickView Plus or a hex viewer of your choice.

Thanks. Had a quick go on the demo version, pretty impressed. The graphical relationship-display looks nice but seems more of a gimmick to me than something of real benefit; would be much more useful if that space was taken with a file viewer akin to EnCase/FTK, etc.

Remember who the results have to be presented to sometimes - lawyers, jurors, people in your office and other non technical people. A picture is worth a thousand words. Also relationship mapping as in Intella, Nuix and Catelas are going to be in (my prediction) all the "forensic" software in the coming months in years because as investigators it provides a great way to filter connections between suspects.

Thanks. Had a quick go on the demo version, pretty impressed. The graphical relationship-display looks nice but seems more of a gimmick to me than something of real benefit; would be much more useful if that space was taken with a file viewer akin to EnCase/FTK, etc.

Remember who the results have to be presented to sometimes - lawyers, jurors, people in your office and other non technical people. A picture is worth a thousand words.

Absolutely, but before you get to that stage us forensicators need to able to produce the results in the first place!

I like pictures to I must admit. In investigations the relationship mapping and filtering has been nice to see the connection web of suspects and hon in the stronger leads. Quite frankly the current column, sort, filter, search investigation is tiresome (particularly jaded because this is what I have to do all day today!)