Windows Forensics Cookbook

How to do it...

What you will see next depends upon your level of permissions. All users are initially taken by default to their Dashboard. For administrators, this will show a list of users along with checkboxes describing their permissions, which can be managed and changed in this view.

For non-administrative users, the Dashboard will show an overview of cases. Click on one of these to begin.

1. Once your case is loaded, you can search for specific keywords or terms of interest using the bar along the top. This will bring back a list of results in the centre pane, from which you can then drill down further, as shown in the following screenshot:

Fig 11.7. A list of results loaded in Nuix's Web Review & Analytics

Clicking on any of the items ...