When using the 'Keep items from the same family together' option to create batches in Intella Connect, the software will perform two actions:
- Detect items belonging to the same family and ensure that they are placed in the same batch
- Sort items by the 'Order by' field option that you have selected. This will likely be 'Family date,' and will ensure that all batches and items inside them are sorted chronologically.
To detect families, Connect examines the location of each item in the hierarchy tree and finds the family root. Any two items with the same family root will be placed in the same family. The following items are ignored when determining the family root:
- Folders
- Email containers (such as PST files)
- Disk images
- Forensic containers
- Registry artifacts
- Sources
- Archives
- Databases
It's important to note that batches may become larger than the number of items set for the 'Number of items in each batch' option. For example, if the final item in a 200-item batch is an email with three attachments, those attachments will be included in the batch. As a result, the batch will contain more than the 200 items initially set.
Updated April 2023