TABLE OF CONTENTS

• Viewing Data
  • Viewing Documents in the Grid
    • Dark and Light Modes
    • File Icons
    • File Status
    • Viewed/Universal Files
    • Grid Details
    • Selecting Files
    • About the Amount of Data Displayed in Fields
    • Performing Actions in the Grid
      • Productions
      • Additional Analysis
      • DocID
      • Bulk Bookmarking
      • Bulk Labeling
      • Bulk Coding
      • Privileged Files
      • Ignorable Files
      • Bulk Imaging
      • Bulk Native Conversion
      • Download native(s)
      • Export to CSV
      • Export Media Categories
      • Export to Semantics21
  • Columns
    • Using Quick Columns
    • Provided Quick Columns
    • Using Custom Columns
    • Moving Columns in the Grid
  • Using Views
    • Using the Grid View
    • Using the Thumbnail View
      • Thumbnails Info
      • Toggling Thumbnail Size
      • Thumbnail Settings
    • Using the Smart Grid View
    • Using the Timeline View
  • Viewing the Panels
    • Viewer
    • Info 
      • Info
      • Duplicates
      • Family
      • Email Conversation
      • History
    • Tags Panel
    • Mini Timeline
    • Maps
      • Processing Requirements
      • Key Controls
      • Longitude & Latitude
      • Color, Size & Shape
      • Populating Map View with EXIF Data
  • Using Document Viewing Panels
    • Using the Native Panel
      • Alternative View
    • Using the Image Panel
      • Buttons and Functions
      • Tabbed Productions
      • Redactions
      • Unitization
      • Restore Original PDF
      • Slip-sheet Maker
    • Using the Text Panel
    • Using the Viewer Panel on Another Monitor
    • Using the Desktop Viewer 

Using Review, you can select and examine your data in multiple ways. You can use various panels to examine the data. You use the Panels toggle to select which panel to display. 

Elements of Viewing Data

The Grid panel lists the filtered evidence for a selected case. 

You can click on   or  buttons in the top-right corner of the application to access the Light and Dark modes respectively. The Dark mode is enabled by default.

Dark Mode:

Light Mode:

File Types are identified within the file list with icons. Each file type has its own unique file icon to denote what it is. 

Note:  You can click on the file type icon to download the file in its native format.

File Statuses are displayed in the grid. Icons are displayed in this column to signal if they are   tagged,  bookmarked, or   deleted items.

Additionally, the encrypted files in the grid will be highlighted in red.

The color codes are differentiated between the viewed and unviewed files in the Item List for easier reference. 

The counts of files that are viewed and unviewed are displayed in the page’s header. You can click on the required count to filter and view only those files in the Item List.

When using the Grid, the counts for Case Items, Total, Filtered, and Checked Items are displayed at the top of the list. 

During review using the Grid, you are able to select files with two methods:

• Select files by checking an item(s) in the file list. 
• Select files by clicking on the item in line.

Notes:

You can hold CTRL while clicking to select multiple files. Alternatively you can hold SHIFT while clicking to select files in ascending or descending order. 

You can select all the files in the list by enabling the checkbox on the column header.Doing so will also provide you an option to select all files in a case. 

By default, the number of characters that display for a field in the Grid and Coding Panel is limited to 512 characters. Additional characters are truncated.

If fields contain large amounts of data, you may need to remove the column from grid or you can reduce the page size to a smaller size such as 100, 50 or 20 records.

During review, you can utilize functions directly from the Grid. These functions range from but not limited to, Productions, Slipsheets and Additional Analysis. 

Productions

See Image Panel section.

Creating Productions

To create a production:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Productions > Production(s).
4. Enter the Production Name.
5. Click Submit Job.

Restoring Original PDF

To restore original PDF:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Productions > Restore Original PDF.
4. Click Submit Job.

Creating a Slipsheet

To create a Slipsheet:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Productions > Add a Slipsheet.
4. Enter a Phrase.
5. Select the Metadata.
6. Click Submit Job.

Additional Analysis

After evidence has been added to a case and processed, you may wish to perform other analysis tasks. Specific items can also be targeted. Multiple processing tasks can be performed at the same time. 

See Creating a Case: Process Evidence. 

To perform an additional analysis:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Additional Analysis.
4. Select any of the below provided Additional analysis processing options:

Note: You can choose to run the advanced evidence processing operations for the selected files by clicking on Customize and selecting the required processing operations.

5. Select the specific Target Items.

6. Select a Processing Manager.

7. Click Run Analysis.

DocID

To assign a DocID:

1. In the Grid, check a record.
2. Right-click on a selected record.
3. Select Assign DocID.
   • The Document Numbering prompt is displayed.

Note: You can enable the Renumber Documents option to renumber the selected files in order to eliminate gaps and correct incorrect numbering.

4. Enter a Prefix value for the DocID.

5. Enter a Suffix value for the DocID.

6. Enter a Starting Number.

7. Enter Padding value based on which the zeros will be padded to the starting number.

• Upon configuring the above values, a preview of configured DocID will be displayed.

 Example: If the padding is ‘1’, the starting number will be ‘01’, and if the padding is ‘2’, the starting number will be ‘001’, and so on. 

 Tip: The DocID column can be used during review to easily view documents have been assigned a document ID.

Bulk Bookmarking

Refer Working with Bookmarks section.

To apply bulk bookmarking:

1. From the home page, click Case List.
2. Select the required case.
3. Click Enter Review.
4. Check the required files.
5. Right-click on a checked file.
6. Select Bulk Bookmarking.
7. Check the required bookmarks.
8. Select the required Options:
   • No operation – No changes will be made to the bookmarks.
   • Assign All Bookmarks – The bookmarks will be assigned to the selected files.
   • Un-assign all Bookmarks – The bookmarks will be unassigned from the selected files.
9. Click Submit Job.

Bulk Labeling

Refer Working with Labels section.

To apply bulk labeling:

1. From the home page, click Case List.
2. Select a case.
3. Click Enter Review.
4. Check the required files.
5. Right-click on a checked file.
6. Select Bulk Labeling.
7. Check the required labels.
8. Select the required options
9. Select the required options
   • No operation – No changes will be made to the labels.
   • Assign All Labels – The labels will be applied to the selected files.
   • Un-assign all Labels - The labels will be unassigned from the selected files.
10. Select Additional Options.
    • Keep Families Together - Check to apply the selected label to documents within the same family as the selected documents.
    • Keep Threads Together - Check to apply the selected label to all email files related to the selected email file.
    • Keep Similar Together - Check to apply the selected bookmark to all documents related to the selected documents.
11. Click Submit Job.

Bulk Coding

Allows you to apply issues, categories, and other field coding to the selected item. See Coding Panels section.

To perform bulk coding:

1. In the Grid, select the records.
2. Right-click on a selected record.
3. Select Bulk Coding.
4. Select the desired Coding Panel using the drop-down list.
5. Select the required options
   • No Change – No changes will be made to the coding.
   • Assign– The labels will be applied to the selected coding.
   • Un-assign - The labels will be unassigned from the selected coding.
6. Select the Additional Options.
   • Keep Families - Check to apply the selected coding to documents within the same family as the selected documents.
   • Keep Threads - Check to apply the selected coding to all email files related to the selected email file.
   • Keep Similar - Check to apply the selected coding to all documents related to the selected documents.
7. Click Submit Job.

Privileged Files

To flag a file as privileged/not privileged:

1. In the Grid, check a record.
2. Right-click on a selected record. 
3. Select Flag As Privileged.
   • The Flag as Privileged prompt is displayed.
4. Select if the flagged files should be privileged or not.
5. Select the below provided flagging options based on your requirements: 
   • Flag duplicate documents – Check to apply the selected flag to duplicate documents.
   • Flag family documents - Check to apply the selected flag to documents within the same family as the selected documents.
   • Flag conversation - Check to apply the selected flag to all emails related to the selected email.

    6. Click Submit.

Tip:  To classify the files with privileged flag, the FlaggedPrivileged column can be used during review.

Ignorable Files

To flag a file as ignorable/not ignorable:

1. In the Grid, check a record.
2. Right-click on a selected record. 
3. Select Flag As Ignorable.
   • The Flag as Ignorable prompt is displayed.
4. Select if the flagged files should be ignorable or not.
5. Select the below provided flagging options based on your requirements: 
   • Flag duplicate documents – Check to apply the selected flag to duplicate documents.
   • Flag family documents - Check to apply the selected flag to documents within the same family as the selected documents.
   • Flag conversation - Check to apply the selected flag to all emails related to the selected email.

     6. Click Submit.

Tip:  To classify documents with an ignorable flag, the FlaggedIgnorable column can be used during review.

Bulk Imaging

To perform bulk imaging:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Bulk Imaging.
4. Select an Image Format.
5. Configure preferences depending on the selected Image Format.
6. Click Next.
7. Configure your preferences. 
8. Click Next.
9. Configure your preferences.
10. Click Submit Job.

Bulk Native Conversion

The Imaging process runs automatically when viewing a file in the Image viewer. You can choose to manually run this job for selected/bulk files in advance to make review within the Image viewer faster.

To perform bulk native conversion:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Bulk Native Conversion.
4. Select Convert to PDF.
5. Click Submit Job.

Download native(s)

To download a file in its native format:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Download native(s).

Export to CSV

See Exporting section.

To export data to CSV:

1. In the Grid panel, select the records.
2. Right-click on a selected record.
3. Select Export.

Export Media Categories

To export to media categories:

1. In the Grid, select the records.
2. Right-click on the selected record.
3. Select the required Export media categories.
4. Provide the Export Path where the files should be exported.
5. Select Include Media if the selected records need to be exported in native format.
6. Provide the Project Vic Case Number.

Note: Enabling the checkbox against the Project Vic Case Number field will allow you to enter the case number without having to select it from the drop-down.

7. Provide the Contact Name.

8. Provide the Contact Title.

9. Provide the Contact Phone.

10. Provide the Contact Email.

11. Provide the Contact Organization.

12. Click on Submit Job

Export to Semantics21

To export to Semantics21:

Note:  This option allows users to export relevant data in JSON format which can be seamlessly ingested into Semantics21. The option to reimport (after classification) into FTK Central will be available in a future release.

1. In the Grid, select the records.
2. Right-click on the selected record.
3. Select Export to Semantics21> All Checked/All Filtered.
4. Select Include Media, if the selected records need to be exported in native format.
5. Enter an Export Path.
6. Enter a File Name (JSON file).
7. Click Export.

You use columns to display specific data properties about evidence items. You can sort, filter, customize, and reposition the columns of information in the Grid pane. There are many pre-configured fields that you can display as columns.

To use quick column:

1. In the Grid, click the Columns drop-down list.
2. Click on any of the provided quick columns.
   • The column changes will be made immediately in the Grid.

Tip:  By default, the file type filters will have automatic columns assigned when toggled. This option can be turned off by toggling the below padlock button.

You can refer to the Default Columns KB article.

To use custom column:

1. In the Grid, click the Columns drop-down list.
2. Click on Select.
3. Select the required columns by checking them.

    4. Click Apply.

The columns will now update in the Grid.

To move column in Grid:

1. In the Grid, find the column that you would like to move. 
2. Click and hold.

3. Drag this column where you would like to move it to.

• You will notice a marker where the column is being held against.

4. Unclick to set the column in place.

You can use different pre-configured views to help you review data. 

• - See Using the Grid Viewer section.

• - See Using the Thumbnail Viewer section.

• - See Using the Map Viewer section.

• - See Using the Desktop Viewer section.

Note:  Whenever you change views, the File List is refreshed.

The Grid displays all objects in a case with the relevant metadata columns automatically applied. 

Note:  You can click on the below Refresh icon to load the updated file list.

Tip: The ‘Files List’ section supports nested sorting options for multi-column sorting. While doing so, the headers of the sorted columns will be numbered based on the sorting hierarchy.

The Thumbnail View allows you to see rows of thumbnail images of the graphic files or video files in your case. While you can view thumbnails, bulk operations can be run using the right-click context menu. You can double click on the file to view the file’s content in Native view.

Additionally, multiple thumbnails can be selected using keyboard shortcuts:

• CTRL + A can be used to select all visible thumbnails.
• CTRL + Clicking can be used to select specific thumbnails.
• SHIFT + Clicking can be used to select all thumbnails between two thumbnails.

 Click on Thumbnail View  to access this view.

Note:  Image thumbnails are generated only when choosing the processing option: 
Generate Image Thumbnails.

Note:  The Thumbnail view is applicable only to images and videos. A blank thumbnail will be displayed for any other filetypes.

Thumbnails Info

You can view the thumbnails of the files along with the corresponding details, click on the below Show Thumbnail Info  button.

Toggling Thumbnail Size

You can resize the Thumbnails by adjusting the Thumbnail Size bar.

Thumbnail Settings

You can click on the Thumbnail Settings button to access and make use of the following options:

Smart Grid View in the Exterro FTK 8.0 automatically groups all the metadata values and displays them in corresponding columns for easier filtering and reviewing purposes.  

All the file metadata details are categorized in multiple scrolling grids. You simply need to click and select all the values required to form a filter query and click on   to view the resulting set of files.

Moreover, you click on   against the required column’s header to filter values of each column. 

In the Timeline View, all the files in the evidence are categorized based on its date and time within the specified range.

To generate the timeline data:

You can generate the timeline data using any of the following methods:

Event Configuration:

Instead of displaying all event updates made for a file, you can choose to filter out the required set of events using Event Configuration. 

You can configure the events by clicking on the below icon and selecting the required events from the Event Configuration pop-up.

Notes:  
You can save the events selected intended to be used later by clicking on the Save New   button in the top-right corner of the Event Configuration pop-up.
The saved event configurations can be access from the drop-down field in the top-right corner of the Event Configuration pop-up.

Filtering the file events based on Timeline:

You can specify the date range to in the Timeline View to filter and view only the corresponding set of files. You can do so, by any of the following methods:

Comparing the file events based on Timeline:

You can compare the file list filtered using two different timelines and compare them for your reviewing purpose. 

To perform the action, click on any of the bar graphs from the timeline and select Add to Compare.

Note:  During the comparison, you can click on the Sync scroll button  to synchronize the scrolling between the two file lists.

Document History

You can view the document’s history i.e., the date and time when the changes, updates, or modifications were made to the file by clicking on the History button against the required document.

FTK Central consists of the following types of panels intended to provide users with wide range of options and features to effectively filter and view the specific sets of data for reviewing:

• Viewer
• Info
• Tags
• Mini Timeline
• Maps

This viewer displays the file’s content in its Native, Image, or Text format. 

You can open this viewer by double clicking on the file in the item list or click on the below icon:

Note:  You can click on the Pop Out   button to open the viewer in a new pop-up.

Refer the Using Document Viewing Panels section for detailed information on the Viewer panel.

Upon clicking on the Info panel, you will be able to see all information associated with the file itself. 

All the file related information is categorized in the below sections:

Info

This section displays all the metadata of the selected file.

You can click on the below Open in new tab button against the Path field to view all the files present in the selected location path. This detail will be opened in a separate tab within the application.

Clicking on any of the date field values will open the Mini Timeline panel to view the file’s timeline events.

Duplicates

Duplicate files will appear in its own panel and clicking on the Object ID will display the files in the Grid. 

Tip:  Click the Original File  button to go back to original file when actively viewing Family, Duplicate files or Email Threads.

Note:  You can click on the Maximize   button to open the viewer in a new pop-up.

Family

Parent and child files will appear in the Family section. Clicking on the Object ID will display the files in the Grid.

Tip:  Click the Original File  button to go back to original file when actively viewing Family, Duplicate files or Email Threads.

Note:  You can click on the Maximize  button to open the viewer in a new pop-up.

Email Conversation

Email conversations will be shown in its entirety when a user has identified an email with a conversation thread. Additionally, any attachments will be displayed; the attachment icon allows users to go directly to the attachment if available.

Tip:  Click the Original File   button to go back to original file when actively viewing Family, Duplicate files or Email Threads.

Note: You can click on the Maximize  button to open the viewer in a new pop-up.

History

While reviewing, the application will record any actions made involving all files. Using the History section allows you to see what user actions have been made towards a specific file. These user actions range from viewing, exporting and other review related actions.

Note:  You can click on the Maximize  button to open the viewer in a new pop-up.

The Tags panel provides the list of Labels, Bookmarks, and Coding panels (configured in the application) intended for the review process.

Refer the following sections to make use of the corresponding features:

• Working with Labels
• Working with Bookmarks
• Coding Panels within Review

Warning:  The data for this panel will be generated only upon selecting a date value from the Info panel of a file.

The Mini Timeline provides you with the list of all events processed for the selected file. Upon clicking a date value in the Info panel, the Mini Timeline panel will be opened, and the corresponding event will be highlighted. You can click on the below Toggle calendar button to select the specific date and view the corresponding events processed on that date.

The Map View allows you to view a map with real-world geographic location of evidence items that have geolocation information associated with them. This lets you understand where certain activities/actions took place.

• If you have photos in the evidence that have GPS data in the EXIF data, you can see where those photos were taken.

Processing Requirements

• Clicking on the Popout Map  button will display the map in a new window with an enlarged view.
• The geolocation data is automatically processed, there is no processing option to select.
• Refer Processing Options section.

Key Controls

Photos with GPS information in the EXIF data. If you have photos in the evidence that have GPS data in the EXIF data, you can see where those photos were taken.

Longitude & Latitude

You can enter a custom latitude and longitude should they have any need to. It can be helpful in situations where there may be some relation with two cases or evidence files. 

Color, Size & Shape

Customizations are key controls, especially when you have your own preferences. Specifically, you can change the color, size and shape of location pointers.

Populating Map View with EXIF Data

To populate map view with EXIF data:

1. Ensure a case is loaded with existing geolocation data.
2. Click the below MapView button.

You can use different pre-configured document viewing panels to visualize data.

• See Native Panel section
• See Image Panel section
• See Text Panel section
• See View Panel on Another Monitor section

You can click the Native view to display the file in its native format.

Chat Applications:

The Native View of the Chat conversations has been enhanced to provide users with a near native experience of the source chat application for easy reviewing.

All the individually collected chat files will be consolidated to display the entire conversation thread. You can click on the below Select this chat on the Item List  button to navigate to and view the corresponding individual file in the Item list.

The following information are displayed in the Native view’s header specifically for chat conversions:

• The chat application’s name.
• The total number of messages present in the selected conversation.
• The participants of the conversation.
• The date and time of the first and last chats in the Conversation.
• The ‘Attachment(s)’ button to click and view all the attachments in the conversation.

Note:  While viewing the attachments, you can click on the Filter conversations around this attachment  button to navigate and view the chat associated with the attachment in the Native view.

For chat applications, you are provided with the following options to performing the corresponding operations in the Native viewer:

Alternative View

Click on   to enable the Alternative View mode in the Native viewer. 

Note:  This option is applicable only for PDF and Word file types.

When viewing PDFs in Image view, you will see a variation of icons and buttons. These options are useful for different processes such as creating tabbed productions, redactions, branding, unitization and having the ability to restore a document. 

Buttons and Functions

Tabbed Productions

FTK Central facilitates expert document preparation, with tabbed production options for creating multiple versions of a document without adding additional documents to a case. This is ideal when redactions are required on a document. It must be done prior to any editing as users will be able to toggle between different versions of a document.

Creating a Tabbed Production

To create a tabbed production:

1. Select the required file from the list view.
2. Select Image in the Viewer.
3. Click on .
   • The Production Options prompt will be displayed. 
4. Enable the Add To Production field and provide a name against it.
5. Click the Save button.

Filtering productions

To filter production:

1. In the Grid, click the Common Filter from the left pane.
2. Navigate to Labels > Production. 

    3. Select the required production label.

Redactions

There may be cases that require redaction of documents for various reasons. FTK Central gives you the freedom to redact documents as you wish.

Tip: You can use the following columns to identify the corresponding information:

DocIsRedacted - To identify documents that have been redacted.
DocRedactionMigrated - To identify documents that have migrated redactions from a legacy application.

Note:  Any processes beyond this point require users to work on Live Version of their document and then save them as tabbed productions.

To perform redaction:

1. Click the Image in the Viewer.
2. Click Redact area to select a color for redacting and select Stamp  to stamp a text.
3. Click and drag on the file to apply the redaction or stamp.
4. Select and drag the redaction or stamp to move it.
5. Click  to save the redactions and stamps applied to the file.

Note:  You can click on .to lock the applied redactions and stamps in the provided location to avoid changing it later.

Unitization

FTK Central allows you to split or merge imaged documents into child documents by using the process of unitization. 

To reorder a document:

Unitization allows users to edit documents visually by giving the ability to create document breaks, delete, move and rotate pages.

1. Click the Image in the Viewer.
2. Click the Unitizationbutton.
   • The Unitization Options prompt is displayed. 
3. Click +.
4. Select the required Action.
5. Enter the New Page # based on which the selected Action should be performed.
6. Click the Save button.

Restore Original PDF

There may be times where the documents reviewed have been incorrectly processed and/or poorly reviewed by a user. FTK Central allows users to restore documents as they were first processed within a case.

To restore original PDF:

1. Click the Image in the Viewer.
2. Click .
3. The restore process will begin.

Slip-sheet Maker

Custom Slipsheets allow users to automatically replace pages in a document or across a case during the review process. 

See Performing Actions In the Grid: Productions section.

Upon clicking on Text view, you can view the text content extracted from the selected file. 

Tip:  OCR text will appear in this panel.

During the review process, you may require may need to use the viewer on another monitor or on a smaller scale. Snapping out the viewer allows you to use the panel as you wish.

Click the below Pop Out button to create a new browser window strictly for the viewer.

Users can utilize the FTK Central viewer to review a multitude of file types, however it can be a timely task when reviewing multimedia file types as certain file types require conversion. The Desktop view (FTK Plus Lite viewer) allows users to review file types instantly using a barebones version of FTK Plus without any prior conversion. 

Users that do not currently have access to this viewer will be prompted to download it when attempting to open this viewer within the FTK Central UI. The installer will be downloaded from the FTK Central app server. 

Click the Desktop viewer   button to open the external viewer.

Please refer to the FTK Plus User Guide for more usage information; FTK Plus Lite viewer functionality is not limited when used with FTK Central.