Hello,
I have been using EnCase 7.07 for a while but I am currently struggling with something and I hope you may help me.
I have index 2 evidences that contain .pst mailboxes. Afterwards I have run an index search looking for emails that contain the word "phone" (for example). Of course, on the results there are many duplicate emails.
When I try to use the filter "show unique items" (something like that is call) it shows an error saying that I am not in the correct view. Because the filter works on the "entries" view and not with emails (that are records).
Other tools like Nuix for example allow to dedup the results just with one click but I am currently using EnCase 7.
Therefore, is there a way or an script or something to filter down the results of a seach and show only unique items that meet the search criteria?
Thanks in advance.
↧