Investigators might want to inspect individual documents,
browsed websites, or sent emails within a specific time block.
Procedure
-
On the Forensics tab, select the VGrid tab.
-
Use one of the following options to inspect content in
a time block:
- To view the types of network traffic and number of documents,
hover over the time block.
- To search content in the time block, select one or more time
blocks. Right-click and select Search selected time blocks.
- To view the sequence of events, select the time block and
then select Surveyor.
- To visualize the content, select a time block and then select Visualize.