Exporting Computer Activity from ESI Analyst

How to Export Computer Activity

When you have completed a review or want to export out a set of computer activity data, you can deselect the other categories to have only Computer Activity

To export your data you can find the menu on your right hand pop-out panel. Click Export From Project and you will be taken to the export page. 
To filter, you can select your Date Range, Actors and/or Tag(s) OR your saved searches. These are the only filters, so make sure you have your data tagged appropriately.
When setting up your export, start with your title. This title should be reflective of the data being exported like “Jesse Bradshaw Computer Activity Export for Production” or “Jesse Bradshaw Supplemental Computer Activity Export 1”.

Once you have your title, you will want to determine the fields you want to export to your CSV, DAT, Pipe or Tab delimited load files. The main item to note is how you want to manage the “message” content. Do you want that in the load file, or a separate file. If you want them in a separate file, you can select “Export Message to a Separate Text File” and your export will have the text messages in a separate file and NOT in the load file.

In computer activity there may be items that have IP Address or other addresses that can contain a lookup and with your export you can include a rendering of the map. You have multiple options with Map Type of: Roadmap, Satellite, Terrain or hybrid. You also have four zoom levels: City, Streets, Streets and Buildings and Buildings. The number next to the level determines the level of zoom with the higher the number the closer the zoom is to the location.

Lastly, select your delimiter that you would like for the export with the dropdown.

Click Export and your items will immediately begin exporting. You can check the status and download your exports under Project Options > Project Items > Exports

Note: If you export WITHOUT selecting any filter, the entire database from Computer Activity will export. You will get a warning where you can confirm or cancel this export.

    • Related Articles

    • Using the Computer Activity Analysis Tool

      Computer forensics,  proprietary platforms and structured data are a part of many investigations and growing in eDiscovery projects. This report helps you quickly understand the actions that have taken place on a forensically imaged computer or data ...
    • How to Filter Computer Activity

      When in Review Project Metadata, you can filter by Computer Activity and the sub-categories: Attachment Name Artifact Path Computer Action Last Accessed Last Modified Source Computer Folder Address Lookup IP Address Once you select the Computer ...
    • Viewing a Computer Activity Item View With Geolocation

      In your project dashboard, click on "Review Project Metadata." On your left, you will see a list of filters. Select the "Type" filter to display a list of sub-categories. From that list, click on "Computer Activity." After you hit APPLY, you will see ...
    • Understanding the Available Fields for Computer Activity

      Overview Computer forensic artifacts, proprietary platforms and structured data are a part of many investigations and growing in eDiscovery projects. With Computer Activity, you can use this category for many different types of data. This article ...
    • Exporting Items Across Multiple Categories

      When you have completed a review or want to export out a set of data across multiple categories, you can deselect the other categories you don't need to export to have only the desired exports. The categories are Communications, Computer Activity, ...