Viewing a Computer Activity Item View With Geolocation
In your project dashboard, click on "Review Project Metadata." On your left, you will see a list of filters. Select the "Type" filter to display a list of sub-categories. From that list, click on "Computer Activity."
After you hit APPLY, you will see the Chronological Item List for all of the records. On one of the items, click on the eyeball, and you will see a chart that displays more details.
When viewing a single item of Computer Activity, you will have a view that will show the fields of metadata that have been loaded into ESI Analyst. On the details and throughout, you will see a + or - which will expand or contract the view of those metadata items.
Main items to note:
- Activity Date
- Original Path / Artifact
- Additional Information
- IP Address (If location is available)
These items will show the activity of the actor and if there is a location present, you can zoom in and out with + and – or double clicking anywhere in the map will zoom you in to that point.
How to Understand the Geolocation in Item View
To see geolocation in item view, first click on "Review Project Metadata" in the "Review and Analysis" section of the project dashboard. In the filters box to the left, click on Type, and then select Geolocation. From the Chronological Item List, ...
Understanding the Available Fields for Computer Activity
Overview Computer forensic artifacts, proprietary platforms and structured data are a part of many investigations and growing in eDiscovery projects. With Computer Activity, you can use this category for many different types of data. This article ...
How to Export Computer Activity
When you have completed a review or want to export out a set of computer activity data, you can deselect the other categories to have only Computer Activity To export your data you can find the menu on your right hand pop-out panel. Click Export From ...
Geolocation Overview and Navigation
Navigation To navigate to the geolocation map, click on "Analysis Tools" in the "Review and Analysis" section of the project dashboard. Then hover over the Geolocation Map Points tool. Once you see the tool turn gray and display a chain-link, click ...
Using the Computer Activity Analysis Tool
Computer forensics, proprietary platforms and structured data are a part of many investigations and growing in eDiscovery projects. This report helps you quickly understand the actions that have taken place on a forensically imaged computer or data ...