When the "Missing evidence is detected" message appears in Intella Pro, it typically indicates that the software cannot locate some of the sources that were originally imported into the case. This often happens when the source files have been moved, renamed, or relocated to a different directory after they were initially indexed in Intella.
To update source locations in Intella, follow these simple steps to ensure your data is accurately imported and managed. Intella allows you to easily configure and update the locations of your source, which contain the files for analysis. This process will show you how to edit the evidence paths or restore the sources back to their original location.
You will notice two warning messages, “file(s) not found” and the source path highlighted in red.
Depending on the source "type", you may see different options to update the source location.
To update the source location for a Disk Image
Click on the add button.
Browse to the the location of where the source has been moved.
Once the new source location has been added, both, old and new locations will be displayed.
Highlight the old source location path and click the remove button.
Once the old source has been removed click on the apply button.