How to do it...

We can start the process by following the given steps:

  1. Start by creating a new case. To do this, run Intella (you'll see Intella Case Manager), type your name (in our case it's Test), and click the Add... button, as shown in the following figure:
Figure 9.1. Adding a new case
  1. Using the Add Case dialog, an examiner can Create a new case, Open a shared case, Add an existing case, or Import a case.
Figure 9.2. Add Case dialog
  1. As we have decided to create a new case, let's choose Create a new case. Now you can see a few fields ...

Get Windows Forensics Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.