1. An introduction to Intella Connect

Intella Connect is a web-based investigation and e-discovery tool. It is ideally suited for use by enterprise, law enforcement and regulatory agencies in civil, criminal or policy-related investigations. It allows you to share any case that has been made with Intella 100, Intella 250, Intella Professional (Pro) or Intella TEAM Manager. The case can then be reviewed using any of the supported web browsers.

Intella Connect’s unique visual presentation will let you quickly and easily search and review email and electronically stored information to find critical evidence and visualize relevant relationships. The birds-eye view helps you gain insight in information that is available on combinations of keywords. In each step of your search it shows the number of emails or files that match your search (and of course a link to the e-mails and files themselves) so that you can effectively zoom in to find what you are looking for.

With Intella, you can...

  • Gain deeper insight through visualizations.
  • Search email, attachments, archives, headers, and metadata.
  • Drill down using Intella Connect’s unique facets.
  • Group and trace email conversations.
  • Preview, cull, and deduplicate email and data.
  • Export results.

1.1. Supported web browsers

  • Google Chrome (most recent version)

  • Mozilla Firefox (most recent version)

  • Microsoft Edge

  • Internet Explorer 9 and newer

  • Internet Explorer 8 - the following features will be disabled:
    • Native preview
    • Redactions

    Security Note: Google Chrome and MS Edge will not delete session cookies after they are closed. That means that logged in user will not be logged out. With this in mind it's always best to log out manually when you finish using Intella Connect.

1.2. System Requirements

Hardware

  • Intel Core i7 2600

  • 16 GB or more of main memory

  • 1 hard disk for case folder

  • 1 hard disk for evidence data


    Hint: the use of SSD disks can further enhance performance.

Software

  • Windows 7 or Windows 8 are recommended.
  • For Windows Server, please see support for full details.
  • MS Office 2007 or above is required for exporting to PST.

1.3. Supported file formats

Intella Processor can extract contents and metadata of the following file formats:

  • Mail formats:
    • Microsoft Outlook PST/OST. Versions: 97, 98, 2000, 2002, 2003, 2007, 2010 and 2013.
    • Microsoft Outlook Express DBX, MBX. Versions: 4, 5 and 6.
    • Microsoft Exchange EDB files. Versions: 2003, 2007 and 2010.
    • IBM Notes NSF (formerly known as Lotus Notes or IBM Lotus Notes). Notes 8.5.x or higher needs to be installed on the computer running Intella in order to process the NSF files. Intella supports all NSF files that can be processed by the installed IBM Notes version.
    • Mbox (e.g. Thunderbird, Foxmail)
    • Saved emails (.eml, .msg)
    • Apple Mail (.emlx)
    • TNEF-encoded files (“winmail.dat” files).
    • Bloomberg XML dump
  • Cellphone extraction formats:
    • Cellebrite UFED XML export
    • Micro Systemation XRY XML and Extended XML exports (Extended XML is strongly recommended)
    • Oxygen Forensic Suite XML export
  • Disk image formats:
    • EnCase images (E01, Ex01, L01, Lx01 and S01 files)
    • DD images
  • Document formats:
    • MS Office: Word, Excel, PowerPoint, Visio, Publisher, both old (e.g., .doc) and new (.docx) formats
    • OpenOffice: both OpenDocument and legacy OpenOffice/StarOffice formats
    • Hangul word processor (.hwp files)
    • Corel Office: WordPerfect, Quattro, Presentations
    • MS Works
    • Plain text
    • HTML
    • RTF
    • PDF (incl. entered form data)
  • Archives:
    • Zip
    • Gzip
    • Bzip2
    • Tar
    • Rar
    • 7-Zip
    • Cpio
    • ARJ
    • Cabinet (CAB)
    • DEB
    • Partial support for ZipX
  • Search Warrant Results:
    • Hotmail (uses a HTML-based collection of files)
    • Gmail and Yahoo (uses an Mbox variant)
  • Instant Messaging:
    • Skype SQLite databases
    • IBM Notes Sametime chats
    • Note that cellphone extraction reports typically also contain instant messaging fragments that Intella may pick up during indexing.
  • Databases:
    • SQLite databases, version 3.
    • Note that Skype SQLite databases get processed differently
  • Miscellaneous formats:
    • iCal
    • vCard
    • XML
    • IBM Notes deletion stubs (experimental, requires a hidden configuration setting)

When indexing plain text file formats, Intella Processor can essentially handle all character encodings supported by the Java 7 platform. This relates to regular text files and to email bodies encoded in plain text format. See http://docs.oracle.com/javase/7/docs/technotes/guides/intl/encoding.doc.html for a complete listing.

When the encoding is not specified, Intella Processor will try to heuristically determine the encoding. The following encodings are then supported:
  • UTF-8
  • UTF-16BE
  • UTF-16LE
  • UTF-32BE
  • UTF-32LE
  • Shift_JIS Japanese
  • ISO-2022-JP Japanese
  • ISO-2022-CN Simplified Chinese
  • ISO-2022-KR Korean
  • GB18030 Chinese
  • Big5 Traditional Chinese
  • EUC-JP Japanese
  • EUC-KR Korean
  • ISO-8859-1 Danish, Dutch, English, French, German, Italian, Norwegian, Portuguese, Swedish
  • ISO-8859-2 Czech, Hungarian, Polish, Romanian
  • ISO-8859-5 Russian
  • ISO-8859-6 Arabic
  • ISO-8859-7 Greek
  • ISO-8859-8 Hebrew
  • ISO-8859-9 Turkish
  • windows-1250 Czech, Hungarian, Polish, Romanian
  • windows-1251 Russian
  • windows-1252 Danish, Dutch, English, French, German, Italian, Norwegian, Portuguese, Swedish
  • windows-1253 Greek
  • windows-1254 Turkish
  • windows-1255 Hebrew
  • windows-1256 Arabic
  • KOI8-R Russian
  • IBM420 Arabic
  • IBM424 Hebrew

1.4. Supported sources

  • File or Folder

Files on local and network file systems can be indexed by Intella. Please check the list of supported file formats.

  • Load files

Intella can index load files that are stored in Concordance, Relativity and CSV format.

  • Hotmail Search Warrant Result

Intella can index the mail packages delivered by Microsoft when responding to a search warrant.

  • Disk images

Intella can open disk image files in EnCase and DD formats and index their contents as if they were mounted and indexed as a regular Folder source. No recovery of items from unallocated or slack space is performed.

  • IMAP account

Intella is able to access an email accounts on an IMAP email server and index emails and attachments. Versions: Intella was tested on several IMAP servers with good results. However, we cannot guarantee that Intella is able to create IMAP account sources for every IMAP email server.

  • MS Exchange EDB Archive (experimental)

Use this option for index an MS Exchange EDB files and restrict indexing to a specific set of mailboxes. Indexing an EDB file in its entirety can be done by using the File or Folder source type.

1.5. Feedback

We take great care in providing our customers with a pleasant experience, and therefore greatly value your feedback. You can contact us through the form on http://support.vound-software.com/ or by mailing to one of the email addresses on the Contact page.