Configuration Key

During portable case creation there will be a variance in file counts. The selected files vs. the exported items will differ, with the latter having an increased file count.


  • IncludeOfflineRelated – This key allows users to toggle exporting related (child) files in portable cases. 


  • IncludeSimilarRelated – This key allows users to toggle exporting similar related files in portable cases.


  • IncludeFamilyRelated – This key allows users to toggle exporting family related files in portable cases.


  • IncludeEmailRelated – This key allows users to toggle exporting email related files in portable cases.



How to configure these keys?

The keys required for configuration are available from FTK/C 7.5.2+. They are located in the ADGWeblabSelfHost.exe.config file located in C:\Program Files\AccessData\Forensic Tools\7.5\bin.


 

Ensure the Exterro Service is restarted after making any changes.



Key

Value

Default

Notes

IncludeOfflineRelated

true = related files will be exported in addition to checked items.


false = only checked items will be exported.

<add key=” IncludeOfflineRelated” value=”false” />


Item counts will differ when toggling key values.


Example: When checking a .zip file for export, selecting it as the root file will export the children in the file regardless of the key value. However, if you were to check on the child items within a zip file it will export those only checked.

IncludeSimilarRelatedtrue = similar related items will be exported.

false = similar related items will not be exported.

<add key=”IncludeSimilarRelated” value=”false” />


IncludeEmailAttachments
true = email attachments will be exported in addition to the emails.

false = email attachments will not be exported in addition to the emails.

<add key=”IncludeEmailAttachments” value=”false” />

IncludeFamilyRelated
true = family related items will be exported.

false = family related items will not be exported

<add key=”IncludeFamilyRelated” value=”false” />