Common Files Search

Overview

The common files feature allows you to search for multiple copies of the same file in different data sources within a case.

Usage

To start, go to Tools->Common Files Search to bring up the following dialog:

You can choose to find any files with multiple copies in the whole case, or specify that at least one of the copies has to be in the selected data source(s).

You can also choose to restrict the search to only pictures and videos and/or documents.

Once the search is run, the matching files are displayed in the results tab. The results are grouped by how many matching files were found and then grouped by hash.