Icon Menu
Icon Search

Intella Investigator

Intella Investigator is a new product that combines the best features of its predecessor, Intella TEAM, with those of another product, W4. It has been specifically designed to provide users with a comprehensive and powerful set of tools for managing the server. Intella Investigator is built for workflow to gather and analyze digital evidence in a way that is forensically sound and admissible in a court of law.

Key features of Intella Investigator

Intella Investigator has a web interface which is easy to use because it can be accessed from any computer with a web browser. This means that users do not need to install any software or plug in any hardware, such as a dongle, to use the interface. One way to make the server accessible externally is to use a virtual private network (VPN).

Intella Investigator supports SSL (Secure Sockets Layer), a widely used protocol for establishing secure connections between networked devices. This ensures that all data transmitted between users and the Intella Investigator system is encrypted, making it more secure and resistant to interception or tampering.

Intella Investigator also includes support for SSO (Single Sign-On), a feature that allows users to log in to multiple systems and services with a single set of credentials. This can make it much easier for users to access the resources and services they need, without having to remember multiple usernames and passwords.

In addition, Intella Investigator includes support for LDAP (Lightweight Directory Access Protocol), a standard protocol for accessing and managing directory information. This allows users to easily integrate Intella Investigator with their existing directory services and manage their users in a centralized and efficient way.

Overall, Intella Investigator is a powerful and feature-rich product that is sure to be a hit with users. Its combination of SSL, SSO, LDAP, and fine-grained user management makes it a versatile and essential tool for managing online resources and services.

With the release of Intella 2.6, Vound combined Intella Connect case sharing capabilities with W4 forensic functionality in Intella Investigator. Intella Investigator allows for a move away from a single TEAM Manager instance needing to be set up and run locally each time a case is shared, to a new centralized server-based user and case management interface.

Intella Investigator is the ideal web-based investigation tool for an agency, law firm, or investigative team that needs to coordinate the search and analysis of digital evidence for a specific incident or crime. Intella Investigator features a powerful search engine and unique visual presentations that have made Intella popular. The easy-to-use web interface and Cluster Map allows you to find critical data, visualize relevant relationships, and drill down to the most pertinent data.

With Intella Investigator, you can process and search file types, multiple email sources and metadata. View results in a visual layout of your choice and export the items of interest in a wide variety of file formats. Intella Investigator makes collaborative review possible in a secure way. Multiple users can be assigned to a case resulting in a greater availability of information.

Using Intella Investigator

Collaborative Review

Intella Investigator multiuser, collaborative and web-based product. Using Intella Investigator you will process digital evidence into a case. Assign multiple people to the case to give them instance access. All interaction is done via a browser. All that is needed is an up-to-date browser. Reviewers will connect using their browser and use their credentials to start their investigation. Reviewers have access to all the standard features of Intella.

Powerful Indexing

Intella Investigator offers experts the ability to index a vast array of file types including disk images, emails, instant messages, cell phone extraction reports, Windows Registry artifacts, and certain proprietary databases.

Cluster Map Technology

Our unique cluster map display enables investigators to see relationships between keywords and search results. This helps the user to identify the not so obvious links between data and people which could be relevant to the investigation.

Explore tab

The Explore tab is a feature that allows users to discover and browse without having to search for specific terms or keywords. It can also help to surface relevant content or features that users may not have thought to search for and provide a more intuitive and interactive way of exploring information belonging to the case.

Image Categorization / Image classification

Intella Investigator includes a powerful image classification and object detection feature that allows users to easily identify and label the content of images. With the Image Classification feature, users can quickly and accurately classify images as documents, photos, or screenshots, making it easy to organize and manage large collections of images.

The Object Detection feature is equally powerful, allowing users to identify and locate specific objects within an image, such as cars and people.

Both the Image Classification and Object Detection features are easy to use, with a simple and intuitive interface that allows users to quickly and easily classify and label images. Users can access these features through the Image tab, which provides a range of tools and options for classifying and labeling images. Whether you're working with large collections of images or need to quickly classify and tag individual images, our new product has you covered.


Intella Investigator supports user-defined Crawler Scripts. A crawler script is code (Python, Groovy or Java) that can run during the indexing and processing of evidence. A crawler script can collect, extract, or process data. It can also be used to enrich or reduce datasets by adding or removing data based on specific criteria. For example, a user might create a crawler script to exclude data that is not relevant to their needs or to add additional data that they want to include in their dataset. Intella Crawler Scripts can be customized to meet the specific needs and requirements of individual users.

Email Threading

Intella's email threading capabilities make it easier for reviewers to review and manage email conversations. Email threading has a few useful features. Firstly, it shows all the messages in a conversation thread. This is useful for the user to understand all the parties who are involved in a conversation thread. Secondly, threading helps reviewers identify inclusive emails. These are emails that when reviewed together, the inclusive emails contain all the conversation in the thread. This eliminates the need to review redundant emails in the thread (non-inclusive emails), and therefore speeds up the review process. The thread also shows where missing emails should be in the thread. Missing emails in a thread can suggest that email had been missed during the collection phase.

Identities tab

An identity is a set of characteristics that someone is recognized by. In Intella an identity may be a combination of things such as an email address, chat handle, and phone number, which can be used to identify a particular person. This identity can be used throughout the investigation as a facet. In the Identities tab you can define these identities.

Advanced Search

Over and beyond basic keyword searches, Intella has several Advanced search and analytical features. Intella’s Insight Analytics delivers macro-views of the data so that you can gain understanding of the scope of your case. Other features such as Content Analysis searches, near duplicate identification, and the Identities view all help with locating the most pertinent evidence within the case.