Tips & Tricks // Getting Tactical: Search for Keywords After Processing an Image

Investigations don’t follow straight or narrow lines, so why search for all your keywords at the outset of a case when searching all the contents of a drive? Now, you don’t have to. In this session, we’ll go over how to search for keywords in “all-content” once an image has already been processed. We’ll also share some keyword search best practices, such as performing an initial search at the outset of a case and how to use the surfaced information to dig deeper into device images.