Knowledge Base
FTK Central Collections
- Configure FTK Central to collect from Network Shares
- Configure FTK Central To Collect From On-premise Exchange
- Configure FTK Central To Collect From Microsoft Teams
- Configure FTK Central To Collect From OneDrive
- Configure FTK Central To Collect From Exchange 365
- Configure FTK Central to Collect from GMail
EDDM
QView and QBlaze
Known File Filter (KFF)
- Cassandra KFF Import Error
- Cassandra Commit Log Corruption
- NDIC and DHS For FTK 6.3+
- "Please Select a Valid Import Type" When Importing the NSRL Hash Set
- Are eDiscovery collection jobs affected by the KFF?
- Launch the KFF Import Utility in GUI mode
System Maintenance
- ★ Standard Viewer not working after Nov 2019
- How to Address Disk Fragmentation on Windows Server
- 'File In Use' error when trying to delete
- How To Empty The Browser Cache With Chrome
- Meltdown and Spectre
- How to Configure Telnet If It is Not Installed
Database Tools & Information
- Dbconfig will not start
- Manually install PostgreSQL 9.6 for use with FTK 6+
- Backup MSSQL Transaction Logs
- Jobs restart after running Clean up tool and Recycle services - Summation
- Set the default backup location in MSSQL
- Set the default backup location in MSSQL 2008
Evidence Processing
- "Processing Options Validation Error"
- Outlook messages with blank date field export with date stamp 1/1/4501
- Exchange EDB Support in LAB, FTK, and Enterprise
- "Unable to find Processing Manager"
- Receiving message "An error occurred when applying transforms. Check whether the specified transform paths are valid" when installing a DPE
- Predictive Coding skips all or large amount of items
Licensing
- QView says "Please run FTK to use your license"
- Generate and apply a Quin-C license
- "Your confirmation code was not recognized" error
- How To View Licenses Registered To A Security Dongle
- "Low Disk Space" Notification With License Dongle
- License Expired Message After Refreshing License Manager
Legacy Knowledge Base
- How To Toggle Out of Reverse Image Mode (Image Viewer Display Is White Text On Black Background)
- Error 15 Garbage Encountered In Note Pointer
- Error "This Page Is Accessing a Data Source On Another Domain"
- "General Exception Printing" Error
- Setting IBlaze/Enterprise So That Browser Briefcase Can Create More Than 100 Records Per Folder
- NT Security Error "Summation Group Membership Has Been Modified Since Your Last Login..."
FTK, Enterprise, and Lab User Interface
- ★ Filter Builder for AccessData Enterprise 6.5 and beyond
- Filtered text folder in case folder
- When Running FTK As Non-Admin Cannot Select Physical Drives When Choosing "Restore Image To Disk"
- How to extract processing profile from JobInformation.log file.
- FTK Load File Report Options Dialog Is Truncated And Scroll Bar Does Not Work
- Offline(on-Prem) Map Visualization for QUIN-C/FTK/LAB/ENT 7.4
Installation, Configuration, and Troubleshooting
- ★ Virtualization and AD Products
- DPE Status Monitor requires NetBIOS name or IP Address to function, Status Monitor will not function when configured with FQDN
- FTK Central Port List
- Failed to create case in FTK 7.2+ after new install
- Use your own SSL certificate for HTTPS with Enterprise 7.4.2
- How To Enable More Evidence Time Zone Selections For AD Ediscovery/Summation Pro
eDiscovery Collections
- ★ Registering an Azure Application for use with the Exchange 365, Teams and OneDrive Connectors
- Site Server Topology
- Collecting from Mimecast
- Microsoft Teams - Data Source Configuration
- Collecting from OneDrive using a single connector (eDiscovery 6.3-7.1.1, Azure portal)
- How do I configure eDiscovery to collect from SharePoint 365?
DNA and PRTK
- PRTK TrueCrypt Attack
- PRTK Bitlocker Attack
- PRTK Fails To Start If "GodMode" Folder is On Desktop
- Error "The program can't start because api-ms-win-crt-runtime-l1-1-0.dll is missing from your computer..."
- PRTK Throws An Error "Can't start because api-ms-win-crt-runtime-l1-1-0.dll is missing..."
- Recover Stored Passwords and Form Data from Internet Explorer 10-11 (Windows Vault)
AD Agent
- Using the Older 6.1 Linux Agent (RHEL/Oracle Linux/Ubuntu/CentOS/Fedora)
- Exporting Public Certificate (.P7B)
- Configuring Enterprise to collect from the macOS managed Agent
- "Could not connect to agent or could not get device list" error
- Manually Installing the macOS Managed Agent (AD Enterprise 7.3+)
- "An error occurred while retrieving Volatile Data" in Enterprise
Loadfile Import
- How to check your load files before Importing
- Map Fields - Default available fields for mapping
- Issue values contained in load file are not imported
- How do I create a Load File from a directory?
- Why Are Email Messages That I Import With a Load File Incomplete?
- File Contains Header But No Valid Record
dtSearch Indexing
- Searching for Accented and Non-Accented words with Index Search
- Underscore Character Treatment In Default FTK DtSearch Settings
- Enable Simple Search Reports
- Why do emails with filtered text show up when "FullText Fails" is run
- Fuzzy date search with Summation or eDiscovery
- Searching does not yield the expected results
MPE
- MPE AD1 Import Error
- MPE+ does not find the network license
- MPE+ FAQ
- MPE+ won’t open
- In the logical image of my Apple device, all the emails are blank. What causes this?
- Is "Windows Phone" OS Supported by MPE+?
Upgrades, Patches, and Migration
Web Review and Bulk Actions
- Restrict Access to documents in Summation Pro
- Standard Viewer No Longer Loads Content Due To Adobe Flash End-Of-Life
- Tips for reviewing Excel spreadsheets
- Thumbnails Generated from Graphics Do Not Look Like Original
- Predictive Coding Workflow
- Summation Pro - Review and Production FAQs
Production and Exporting
- ★ Redact in Quin-C / QView and Produce from Summation Pro or eDiscovery
- Export Path "Browse" Dialog Displays No "Server Name" Input Box
- Production Set Will Not Save and "Argumentnull_generic" Error Appears in System Log
- Browser Briefcase Grid Cells Are Not Editable
- How Does One Use The "Iblaze Page ID" Branding Option
- Production/Export sets are not sorting by SentDate
MAP, WCF, Work Manager, and Async
- ADG.Map.Web 503 Browser Error
- MAP error referencing "LicenseService"
- AccessData Service Impact
- Web Server in a DMZ
- How Can I Change the Summation/eDiscovery Website Timeout?
- Change Service Account Password
Backup and Restore
- Restore fails on single case
- Backup and Restore Cases Using DBConfig
- Error 118 (During Case Backup / Restore)
- Backup/archive using Oracle fails with error about "un-representable DateTime" (FTK 4.2.x+)
- Backing up or archiving a case fails
- Backup AccessData Databases and Sequence Files in MS-SQL Server
Product Solutions
- ★ Forensic Tool Kit applications and AWS Snapshots
- Archiving an iBlaze case
- Standard viewer stops working and/or errors about flash needing to be installed in Summation/Ediscovery
- How To View Accessdata Training Exam History and Completion Certificates
- AD Enterprise is stuck “Getting allowed agent data from Active Directory”
- Running a batch remediation job in Enterprise
White Papers
- SQL 'sa' account requirement for new install
- What languages are supported by Language Identification?
- SQL Server Accounts Used by AccessData® Solutions
- Disaster Recovery
- Which Image / Archive Formats Do AccessData Products Support?
- AD1 Support for AD 6.0 Products and FTK Imager