Intella uses the index to manage all actions within the case except for re-indexing, opening items in their native viewers, and exporting items. These three processes require access to the original evidence. If the original evidence is not in the same location as when it was indexed, the error message mentioned above may appear. A common cause for this issue is when a removable hard drive, such as a USB drive, was used to hold the evidence during the indexing phase, and the drive letter has changed when it was reconnected. In this situation, the solution can be to change the drive for the USB drive back to what it used to be or to go to the Sources tab, highlight the source, and path it to the correct location:
- To change the drive letter, connect the USB drive used during the indexing phase.
- Open File Explorer and right-click on the USB drive.
- From the context menu, select "Change Drive Letter and Paths."
- In the Change Drive Letter and Paths window, select "Change."
- Select the desired drive letter for the USB drive (the one it had during indexing).
- Click OK and close the window.
If changing the USB drive letter is not feasible, follow these steps:
- Open the case in Intella.
- Go to the Sources tab.
- Highlight the source where the evidence is stored.
- In the source details, click the "Path" button next to the location field.
- Browse to and select the correct location of the evidence.
- Save the changes and wait for the source to update.
After these steps, the error should no longer appear when attempting to open an item in an external viewer or application.