Tagging is the process where you connect a descriptive word to an item, or a group of items. For example, let's say one of your items is a document that contains valuable information. You decide to tag this item with the word 'important'. Tagging helps you to organize results so that they can be found quickly. There are several ways to use tags in Intella.
Tagging items and removing tags
- Tagging items in the Search window
- Tagging items in the Previewer
- Tag hierarchy
- Removing tags
Reviewing tagged items
- See all tagged items
- Searching with tags
- Create new tag inside
- Editing a tag
- Deleting a tag
- Pin a tag to a button
- Exporting the tag values
Tagging items and removing tags
Tagging in the main window
Once you have applied your search and filtering criteria, you can either tag the results shown in the cluster(s), or you can manually select the items to be tagged in the Details table.
If tagging a complete cluster, right click on the cluster and select 'Add tags'. You can also select multiple clusters if these need to be tagged.
If you want to tag one or more items from the Details table, highlight the items that you want to tag, then right click on the selection and select 'Add tags' from the context menu.
Note: You can use your mouse and the Ctrl, or Shift keys to assist with highlighting the items in the Details table. The Ctrl key lets you highlight several individual items, while the Shift key lets you highlight groups of items.
When the tagging dialogue is shown, Type a name for the new tag under 'Tag name'. In this example I have use some numbers in front of the tag name. This allows the tags to be sorted in alphanumeric order, which keeps the Tags facet tidy, and allows better sorting of tags. You don't have to use numbers in front of your tags, but it is a useful habit to get in to.
Optionally, you can add a description for you tag in the Description field.
Click the Add button to commit the creation of the new tag.
Once done, click on the Ok button to close the tagging dialogue. You can see your new tag in the Tags facet.
Tagging in the previewer
Tags can be applied when reviewing items in the Previewer window. When you are previewing an item, click on the Tag button which is shown on the left hand side of the Previewer window. This will open the Tagging dialogue where you can tag the item following the same steps as above.
When tags have already been used, they will appear as 'Quick tags' in the Previewer window (next to the Tag button). You can use these quick tag buttons to tag an item instantly, without having to open the tagging dialogue. See the last section on pinning tags to a quick tag buttons. This allows the user to use the shortcut keys Ctrl+1, Ctrl+2, and Ctrl+3 to quick tag an item.
Intella supports tag hierarchy where tags can be created within other tags. This is useful to help keep your Tag facet tidy and to organise your tag into some investigative order. For example, if there are several investigation points, a top level tag can be created for each investigation point. The results for searches (for each investigation point) can then be tagged under these heading. In this example we show three main groups, and the sub tags that reside in these groups.
Tags can be deleted from a case.
Note: Deleting tags is a permanent operation and you cannot recover tags that have been deleted.
To remove items from a tag, highlight the tagged items in the Details table, then right click on the items and select 'Remove tags'. A dialogue will be displayed which lists the tags assigned to the items in the selection. Check the tags which you want to remove and click on Ok.
The tags for all items in a cluster can be removed by right clicking on the cluster and selecting the 'Remove tags' option.
An entire tag, or group of tags can be removed directly from the Tags facet. Highlight the tag(s) which you want to remove, then select Delete in the context menu. This will delete all of the highlighted tags. Note that you will need to confirm the deletion of the tags.
Tags can also be removed from other views such as the timeline and thumbnails views.
Reviewing tagged items
Once you have items tagged, you can see all of the items that have been tagged. This is done by highlighting all of the tags in the Tags facet, and clicking on the Search button at the bottom of the facet values list.
A single tag, or multiple tags can be searched to show the items within those tag(s). When searching a tag, the searches can also be Include, or Exclude searches. This is useful if you don't want certain items to be shown in the resulting cluster. For example, if you have tagged items as privileged, you can run an Exclude search on the privileged tag to hide these items from view.
You have a number of tag controls for managing tags. These options are shown when you right click on a tag.
Create new tag inside... - This allows the user to create a new tag inside of an existing tag. This allows for tag hierarchy.
Edit tag... - This option opens a dialogue that allows the user to rename the tag, move the tag into another tag, and change the description of a tag
Delete - We have already discussed the Delete option above. Remember that deleted tags can not be restored within the case.
Pin tag to button - Allows the user to pin a tag to a quick tag button in the Previewer window. This also allows the user to use keyboard shortcuts for the quick tag buttons (e.g. Ctrl+1, Ctrl+2, Ctrl+3). By default there are 3 quick tag buttons. This can be increased to 9 quick tag buttons by changing the value in the settings under preferences (File - Preferences - Tagging).
Export values - Allows the user to export the tags, and their counts to a CSV file