Section 10 Correlation Engine problem

Online Training
13

Hi;

I have the same “problem” as Ross_Wilkinson.

I have created a new case from scratch, using only the mediacard.e01 data source and imported and created the hash sets indicated in lab 6. Same result, nothing marked as “notable” in “Interesing Items” … but … after review LAB6, point 8 say:

  1. While reviewing the images in that folder, it is noticed that “IMG_20191024_155744.jpg” shows health violations by bringing the dog into a restaurant. We want to tag this as Notable:

    Right click on it
    Select “Add File Tag” and choose “Notable Item”

After doing it and run ingest modules again in “device2_mediacard.e01”, i get a one interesing file ( Previusly Tagged As Notable - Central Repository - )

Hope that helps,

Regards