Keyword Search in Digital Forensics Tool
MailXaminer is a reliable email forensics tool which helps the investigators to carefully analyse the elecronic evidence during the cybercrime investigation. This analysis tool provides the option to perform electronic discovery of the evidence from the various computer files with help of advanced search options. Among that the keyword search forensic is another specialized searching mechanism which helps the examiners to find a particular computer evidence from a large database. The forensic keyword search tool allows to add multiple keywords at a time to search a set of electronic documents and attachments which comes under the searched keyword category. Refer the steps given in the below section to know how to perform forensic search using keyword.
Add the evidence data file into the forensic analysis tool to perform digital forensics keyword search and extract the hidden evidence. Click on Add New Evidence button from the navigation bar in the Evidence section to add computer data file into the software. This allows you to add electronically stored information from four sources such as Email Client, Cloud, Image and Messenger.
To perform the keyword search forensic on a suspected database file move on to the Keywords ection of the software and select the Add Keyword button to include search keywords prior to processing. This allows the user to add multiple keywords at a time and perform forensic analysis on the electronic data files.
Start Keyword Search Process
After you click on the Add Keyword option a new window will pop up. Which will allow you to add keywords for search either manually or through CSV file. Through the Import CSV option you can enter multiple keywords manually into the forensic keyword search tool. In the case where the user need to add a bulk set of keywords it is not possible to enter each keyword one by one. In such situation, through the Import CSV option user can add a large set of keywords. After adding the keyword list, select the desired keyword(s) to perform the forensic search using keyword on the evidence.
Digital Forensics Keyword Search Result
Once the keyword search in computer forensics is completed, the user can view and access the resultant evidence file through the software display tab. The user can display the keyword search result or particular keyword by selecting the keyword from the software keyword section .
Forensic Keyword Search on Attachment
Similar to the message files the keyword search in computer forensics can also be performed on attachments. After the keyword search is completed, the investigator can click on any email and switch to attachment tab to see the search result. To perform keyword search in attachments, make sure to enable OCR option in evidence settings.
Export & Bookmarking Options
Once the entire forensic keyword search is complete, user can Bookmark the electronic file to add into the evidence list or Export the evidences file into the various file format. Through the Export option, investigator can easily create a backup of the electronic evidence for the future reference purpose or submitting as the evidence in the court.
Additional Keyword Options
There are also options like Edit and Delete to modify the existing keywords in the software. To do this, user can simply select the keyword and click on the Edit or Delete option.
The final and important part of each investigation process is the generation of the investigation report. Using the Download Report option in the Search tab, investigators can easily generate the court admissible report.
After completing the digital forensics keyword search, user can generate a search report through Keywords option in the Download Report window. The report generated by the software contains the information such as Keyword, Hit Count and Search Query.
