Case resources

Case actions are available to administrators and users with the proper privileges on the Cases table. The following sections detail the case actions that are available within Nuix Investigate.

Thumbnail generation

If a case contains many images or multimedia files, it is recommended that thumbnails be generated for the case during case creation. Thumbnails enable users to perform a quick review of images and other media files from within the Gallery and other views without needing to open each item. If thumbnails are not included within the case, the item must be opened to view its contents.

Note: The ability to generate and delete thumbnails is no longer included within Nuix Investigate.

To include thumbnails within a case, ensure that the Generate thumbnails for image data processing setting is enabled when preparing a case.

Case binaries

As evidence is ingested into a case, the Nuix Engine extracts all available data from each file so that it can be further analyzed. In some instances, however, access to the original evidence file, the item’s binary, is required to perform additional actions. Several features and functions within Nuix Investigate rely on item binaries being available when a case is opened. Based on the configured data processing settings used when a case is created, item binaries are typically stored using one of the following methods:

Within the case:
‎By enabling the Store binary of data items evidence setting within the Processing profile prior to ingestion, a copy of each item, up to a specified maximum binary size, is stored in a database within the case directory. This method increases the size of the case by including a copy of the evidence set, however, it allows the case to be portable.

External to the case:
‎By choosing not to store binary, items are kept in their original location from where they were ingested, and the fully qualified path of the evidence directory is instead referenced from within the case. This method requires less storage but requires that the evidence directory is always available and accessible by the case.

If the item binaries for a case are stored in an external location that is no longer accessible by the case, an item binary cannot be located error message is displayed when a feature that requires item binary is used.

If this occurs:

Ensure that the original evidence directory has not been moved or renamed.

If the evidence directory was modified, restore the directory to resolve the error.

If the original evidence directory is still available, but not always accessible, you can reprocess the evidence and store the item binary within the case. To reprocess the evidence:

Open the case within Nuix Workstation.

Select all items within the Results view, or a subset of items which are missing their binary.

Right-click and select Reload Items from Source Data from the context menu.

Click Yes to accept the confirmation message.

On the Data Processing Settings tab of the Evidence Processing Settings window, select the option to Store Binary of data items.
‎This option stores binary for the selected items within the case.

Click OK and follow and remaining prompts to reload the items within the case.

Upgrade older cases

If attempting to open a case that was created using a previous version of the Nuix Engine, you are prompted to upgrade the case before proceeding.

To upgrade a case, click Upgrade from the dialog that appears when you select the case from the Cases table.

Only an administrator can perform a case upgrade. Once a case has been upgraded, the process cannot be reversed.

Tip: Nuix recommends that you create a backup of the case from your defined Inventory location prior to performing an upgrade.