Primary personas: Case Manager
Supporting personas: Digital Forensic Expert, Processing Analyst, Data Analyst, Legal Privilege Expert
View persona matrix
Workshop Scenario: "I've received data and need to get it into EDT"
| Feature | Description | Key User Action |
|---|---|---|
| Staging Tab | Entry point; upload compressed/forensic files; file-explorer navigation; right-click context menu | Upload and select source data |
| Itemisation Logs | Scan container contents; download CSV report | Pre-import data profiling |
| Item Kinds & Types | Detected file Kinds and Types with counts; table/chart views; Excel export | Understand data composition |
| Assign Custodian | Dialog to assign custodian to staged data | Track data provenance |
| Import Unprocessed Files | Full wizard: Options, Duplicates, Default Values, Image Generation, Summary; 14,000+ file types | Process native electronic data |
| Import Load Files | Import/Update/Import-and-Update modes; field mapping; validation; 12+ load file formats | Ingest pre-processed data from other platforms |
| Simplified Load File Import | Reduced wizard with admin-configured pages; requires Import Template | Streamlined for less technical users |
| Import Cellebrite | Specific workflow for .ufdr mobile forensic data; 30+ social/chat message types | Import mobile device evidence |
| Import QA (Reimport) | Match by EDT ID or Document ID; propagate to MD5 duplicates; update metadata | Fix and reimport failed files |
| Create Record | Single file upload as Evidence or Record type; template-driven | Ad hoc evidence addition |
| Import Templates | Save/reuse import configurations; site-wide or case-specific | Consistent repeat imports |
| Container Expansion | Auto-expand ZIP, PST, OST, 7z, RAR, forensic images (E01, AD1, DMG, VHD, etc.) | Process nested/compressed files |
| Full-Text Extraction | Extract searchable text from native files; configurable ignored extensions | Enable keyword search |
| Metadata Extraction | Date, Author, Title, Recipients + extended properties (GPS, tracked changes, speaker notes) | Populate structured data |
| EXIF Data Extraction | Geolocation, camera data, media properties from images/multimedia | Forensic metadata capture |
| File Type Detection | Content-based detection of 14,000+ types; auto-corrects mismatched extensions | Forensic accuracy |
| DeNISTing | SHA-256 hash comparison against NIST NSRL; exclude known system files | Reduce review set |
| Password Handling | Password Bank for batch attempts; per-import passwords; QA-tab targeted decryption | Unlock encrypted files |
| Hard Deleted Recovery | Recover permanently deleted items from PSTs and OSTs | Forensic completeness |
| Malware Scanning | Automatic scan of all imported natives/PDFs up to 5GB; quarantine infected files | Security protection |
| Automated Import via API | EDT API Framework for external system integration; trigger-based scheduling | Workflow automation |
| Category | Formats |
|---|---|
| Email Stores | PST, OST, NSF, MBOX, EDB, MSG, EML, EMLX |
| Forensic Images | E01, EX01, L01, AD1, DMG, VHD, DD/RAW, ISO, AFF, MFS01, CTR |
| Compressed | ZIP, 7z, RAR, TAR, GZ, CAB, ARJ, LZH |
| Load Files | EDT, Concordance, CSV, Relativity, Summation, Tab Delimited, SEC, DOJ, Ringtail, Cellebrite |
| Social/Chat | WhatsApp, Bloomberg, Google Chat/Hangouts, Teams, YouTube, RSMF + 30 Cellebrite types |