image job setup screen or when viewing the forensic log associated with a logical
image job.
• Each of the search parameter fields makes use of drop-down selection boxes to
help guide the setup of each parameter.
• Text fields used for matching file names, file extensions, and file paths can use
any Unicode characters TX1-supported filesystems might contain.
Note: Unicode is the standard for encoding visual text characters/symbols into
digital values to allow computer systems to understand what characters/
symbols are being referenced for proper display and processing. It was defined
to allow digital encoding of special characters/symbols (including language
specific accent glyphs, for example) that are not covered by the ASCII
standard. TX1 uses UTF-8 (Unicode Transformation Format ‒ 8 bit) to encode
all possible characters/symbols used in all filesystems that TX1 supports and to
use those encoded values when matching characters during logical image
searches. For characters that are composed of multiple, distinct glyphs (for
example the German umlaut over the letter A), TX1 uses the NFC
(Normalization Function Composition) standard to normalize the various
encoding methods into a common hex value for matching purposes. For more
information, search for “UTF-8” and “Unicode equivalence” on the internet.
The various search parameter fields that TX1 supports are covered in the following
sections.
4.5.2.1 File type
The File type search parameter restricts the search to apply only to files that match a
list of file extensions. Each search can have any number of file type constraints.
When multiple file type constraints are included in a given search, a match of any
one of them will include/exclude a given file.
The following file type search parameters are available:
• Archives
• Databases
• Documents
• Emails
• Multimedia
• Pictures
• Custom
Each type other than Custom has a predefined list of extensions known to be
associated with that type of file. The lists can be seen by tapping the blue help button
(circle with question mark) to the right of the file type parameter field. All
extensions associated with each file type are found in “File extensions” on page 138.
4.5. Logical imaging
ISTX240300-UGD-EN-1
User Guide
131
To Next Page
Loading...
