Intella 3.0 - Creating and Managing a Case on Intella Node


This article explains how to create, index, manage, and import cases stored on an Intella Node. The process is the same whether you are using Intella Connect or Intella Investigator.

When one or more Intella Nodes are available, you can create a case directly on the selected node’s local disk. This method bypasses shared folders and uses a local disk path instead, providing performance benefits during indexing and case operations.


Creating a New Case on Intella Node

When an Intella Node is available:

Open the Create Case option.

Enter:

Case name

Optional description

Click Browse to select the case folder location.

Go to the Node Local Folders tab.



The Node Local Folders view displays the file system of the selected Intella Node.

Navigate to the desired storage location.

Click New Folder.

The folder name field will automatically populate with your case name.

Click Create, then Use.

Click Create to finalize the case creation.



You will be taken back to the Case screen, where you can begin adding new data.

Note: Case templates are not currently available for cases stored on Intella Node. This functionality may be added in a future release.


Adding Evidence Sources

After creating the case:

Select your Source Type.

Click Next.


Important Performance Recommendation

When adding sources:

Always select paths on the local disk of the same Intella Node where the case resides.

This ensures optimal indexing performance.



This rule does not apply to cloud sources.

Flexible Storage Configuration

While storing both:

The case folder, and

The evidence data

on the local node provides the best performance, it is not required.

Intella allows full flexibility in storage configuration. For example:

Case stored in a shared folder, evidence on local node.

Case stored locally, evidence on shared folders.

Mixed configurations across locations.

Indexing the Source

After selecting your source:

Click use.

Click Next. 

Check the box: Yes, I want to index this source.

Click Add.

If your case resides on an Intella Node, you will see a message confirming this.



Why Local Indexing is Faster

When both the case and evidence are stored on the same local node:

The node accesses case data and evidence data directly.

Network latency is eliminated.

Indexing speed improves significantly.


Removing (Deleting) a Case

To delete a case stored on Intella Node:

Click the Remove Case button, just as you would with any other case.


Sharing Cases

Cases stored on an Intella Node cannot be shared directly. It will need to be moved to your Connect server before any sharing and reviewing can begin. Once the case has been moved to either the server local folder or shared folders, it can be imported into the Connect UI by specifying the case location. 

To import an existing case from Intella Node. Go to the Cases → Import subview.

Under the Existing Case panel:

Provide the full path to the case folder
OR

Click Browse and use the Shared Folders or Server Local Folders tab.

Click Use



Once the system verifies the path and identifies the case:

Click Add Case.



The case will now appear in your case list. You can now share the case by clicking on the case and share button. 

Summary

Creating and managing a case on Intella Node allows you to:

Store cases directly on a node’s local disk

Improve indexing performance

Maintain flexible storage configurations

Import and manage existing node-based cases

For a visual walkthrough of creating and managing a case on Intella Node, we also recommend watching our detailed explainer video here https://vound.info/creating-case-intella-node