{"id":14811,"date":"2020-11-02T00:00:00","date_gmt":"2020-11-02T00:00:00","guid":{"rendered":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/"},"modified":"2026-03-11T14:17:48","modified_gmt":"2026-03-11T14:17:48","slug":"define-files-collect-digital-evidence","status":"publish","type":"post","link":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/","title":{"rendered":"Define Files to Collect Digital Evidence (Updated in 2022)"},"content":{"rendered":"\n<p>When collecting digital evidence, speed is often the name of the game, such as when you are serving a search warrant, dealing with a mass casualty incident, working a consent search, or trying to ascertain where to focus your efforts when dealing with multiple devices. When dealing with these types of use cases, one-dimensional or one size fits all evidence collection, will not pass muster and you need the ability to cut through the noise and get to the relevant information fast.&nbsp;<\/p>\n<!--more-->\n<p>ADF <a href=\"\/digital-forensics\" rel=\"noopener\">digital forensic<\/a> software gives you, the investigator or examiner, the ability to easily choose how you want to collect digital evidence. You can prioritize speed or opt for a more comprehensive search when you have the time to do so. Since each investigation or crime scene is different, with ADF you have the ability to quickly adapt to easily get the evidence you need to help you move your case forward.&nbsp;<\/p>\n<video width=\"100%\" controls>\n  <source src=\"https:\/\/4330725.fs1.hubspotusercontent-na1.net\/hubfs\/4330725\/How%20to%20Define%20Files%20to%20Collect%20Digital%20Evidence.mp4\" type=\"video\/mp4\">\n<\/video>\n<p>In this short 3 minute video, Rich Frawley, our Director of Training and digital forensic specialist, teaches you how to understand the options you have in the Define Files screen when you choose to <a href=\"\/dei-custom-search-profiles\" rel=\"noopener\">customize a Search Profile<\/a>.&nbsp;When defining files to collect, whether for file collection, by keyword, or by hash ADF offers you several options that need to be selected when you create a Custom Search Profile. Your options are:&nbsp;<img decoding=\"async\" src=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence.jpg\" alt=\"Define Files to Collect Digital Evidence\" width=\"300\" loading=\"lazy\" style=\"width: 300px; float: right; margin: 10px;\"><\/p>\n<ul>\n<li><span style=\"background-color: transparent;\"><strong>Collect matching files:<\/strong> Selected by default &#8211; If this box is unchecked it will only detect files (no collection). The original files will not be collected however, the files are otherwise processed normally (thumbnails are created, video frames are extracted, metadata is extracted, etc.).<\/span><\/li>\n<li><strong style=\"background-color: transparent;\">File identification method: <\/strong><span style=\"background-color: transparent;\">This option defines how the files selected in File types are identified <\/span><\/li>\n<li><strong style=\"background-color: transparent;\">Fast identification:<\/strong><span style=\"background-color: transparent;\"> Identifies file types using the file extension only. This method is the fastest but it will not identify files without extensions or files with an incorrect extension.<\/span><\/li>\n<li><strong style=\"background-color: transparent;\">Thorough identification for files without extensions:<\/strong><span style=\"background-color: transparent;\"> Uses file signature analysis to identify files that have no file extension and fast identification on those that do. This method is useful for applications that save data in files without extensions such as the Google Chrome cache.<\/span><\/li>\n<li><strong style=\"background-color: transparent;\">Thorough identification for all files<\/strong><span style=\"background-color: transparent;\">: uses file signature analysis to identify all files. This will increase the time the scan takes to run but it is the most accurate file identification method.<\/span><\/li>\n<\/ul>\n<p><span style=\"background-color: transparent;\">You will also be able to control the options related to archives, documents, and picture DB files:<\/span><\/p>\n<ul>\n<li><strong style=\"background-color: transparent;\">Search selected file types in: <\/strong>\n<ul>\n<li><strong style=\"background-color: transparent;\">Archives:<\/strong><span style=\"background-color: transparent;\"> searches for all selected file types within archives such as zip, tar and other containers.<\/span><\/li>\n<li><strong style=\"background-color: transparent;\">Documents<\/strong><span style=\"background-color: transparent;\">: searches for all selected file types embedded within Document file types.<\/span><\/li>\n<li><strong style=\"background-color: transparent;\">Picture DB<\/strong><span style=\"background-color: transparent;\"><strong> File<\/strong>: searches for all selected file types within Windows thumbcache, thumbs.db files and Apple ithmb files.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><span style=\"background-color: transparent;\"><a href=\"\/dei-pro\" rel=\"noopener\">Digital Evidence Investigator PRO<\/a> is the best automated digital forensic tool for field investigations of mobile devices and computers. Tie the user to a files, artifacts and digital evidence in a timeline view. DEI PRO comes with out of the box search profiles which can be customized by investigators and examiners.&nbsp;<\/span><\/p>\n<p><a class=\"optech-default-btn btn-style cta_button\" href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/4330725\/60e1b093-db59-4a6e-bbb6-7fb62c6cfd8b\" target=\"_blank\" data-text=\"How to Create a Search Profile in DEI PRO\"><span class=\"btn-wraper\">How to Create a Search Profile in DEI PRO<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When collecting digital evidence, speed is often the name of the game, such as when you are serving a search warrant, dealing with a mass casualty incident, working a consent search, or trying to ascertain where to focus your efforts when dealing with multiple devices. When dealing with these types of use cases, one-dimensional or&#8230;<\/p>\n","protected":false},"author":3,"featured_media":13155,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[63,283],"tags":[133,73,36,74,33,122,99,141],"class_list":["post-14811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-video","tag-custom-search-profiles","tag-dei-pro","tag-digital-evidence","tag-digital-evidence-investigator","tag-digital-forensics","tag-forensic-artifacts","tag-how-to-video","tag-knowledge-base-video","optech-blog blog-single"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions\" \/>\n<meta property=\"og:description\" content=\"When collecting digital evidence, speed is often the name of the game, such as when you are serving a search warrant, dealing with a mass casualty incident, working a consent search, or trying to ascertain where to focus your efforts when dealing with multiple devices. When dealing with these types of use cases, one-dimensional or...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\" \/>\n<meta property=\"og:site_name\" content=\"ADF Solutions\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adfsolutions\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-02T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-11T14:17:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Richard T. Frawley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:site\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Richard T. Frawley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\"},\"author\":{\"name\":\"Richard T. Frawley\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\"},\"headline\":\"Define Files to Collect Digital Evidence (Updated in 2022)\",\"datePublished\":\"2020-11-02T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:17:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\"},\"wordCount\":535,\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png\",\"keywords\":[\"Custom Search Profiles\",\"DEI PRO\",\"Digital Evidence\",\"Digital Evidence Investigator\",\"Digital Forensics\",\"Forensic Artifacts\",\"How To Video\",\"Knowledge Base Video\"],\"articleSection\":[\"News\",\"Video\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\",\"url\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\",\"name\":\"Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png\",\"datePublished\":\"2020-11-02T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:17:48+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png\",\"width\":1600,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/adfsolutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Define Files to Collect Digital Evidence (Updated in 2022)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/adfsolutions.com\/#website\",\"url\":\"https:\/\/adfsolutions.com\/\",\"name\":\"ADF Solutions\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/adfsolutions.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/adfsolutions.com\/#organization\",\"name\":\"ADF Solutions\",\"url\":\"https:\/\/adfsolutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"width\":512,\"height\":512,\"caption\":\"ADF Solutions\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/adfsolutions\",\"https:\/\/x.com\/adfsolutions\",\"https:\/\/www.linkedin.com\/company\/adf-solutions\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\",\"name\":\"Richard T. Frawley\",\"url\":\"https:\/\/adfsolutions.com\/author\/richardtfrawley\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/","og_locale":"en_US","og_type":"article","og_title":"Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions","og_description":"When collecting digital evidence, speed is often the name of the game, such as when you are serving a search warrant, dealing with a mass casualty incident, working a consent search, or trying to ascertain where to focus your efforts when dealing with multiple devices. When dealing with these types of use cases, one-dimensional or...","og_url":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/","og_site_name":"ADF Solutions","article_publisher":"https:\/\/www.facebook.com\/adfsolutions","article_published_time":"2020-11-02T00:00:00+00:00","article_modified_time":"2026-03-11T14:17:48+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png","type":"image\/png"}],"author":"Richard T. Frawley","twitter_card":"summary_large_image","twitter_creator":"@adfsolutions","twitter_site":"@adfsolutions","twitter_misc":{"Written by":"Richard T. Frawley","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#article","isPartOf":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/"},"author":{"name":"Richard T. Frawley","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39"},"headline":"Define Files to Collect Digital Evidence (Updated in 2022)","datePublished":"2020-11-02T00:00:00+00:00","dateModified":"2026-03-11T14:17:48+00:00","mainEntityOfPage":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/"},"wordCount":535,"publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"image":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png","keywords":["Custom Search Profiles","DEI PRO","Digital Evidence","Digital Evidence Investigator","Digital Forensics","Forensic Artifacts","How To Video","Knowledge Base Video"],"articleSection":["News","Video"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/","url":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/","name":"Define Files to Collect Digital Evidence (Updated in 2022) - ADF Solutions","isPartOf":{"@id":"https:\/\/adfsolutions.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage"},"image":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png","datePublished":"2020-11-02T00:00:00+00:00","dateModified":"2026-03-11T14:17:48+00:00","breadcrumb":{"@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#primaryimage","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Define-Files-to-Collect-Digital-Evidence-ADF-DFIR-1.png","width":1600,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/adfsolutions.com\/define-files-collect-digital-evidence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adfsolutions.com\/"},{"@type":"ListItem","position":2,"name":"Define Files to Collect Digital Evidence (Updated in 2022)"}]},{"@type":"WebSite","@id":"https:\/\/adfsolutions.com\/#website","url":"https:\/\/adfsolutions.com\/","name":"ADF Solutions","description":"","publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adfsolutions.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adfsolutions.com\/#organization","name":"ADF Solutions","url":"https:\/\/adfsolutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","width":512,"height":512,"caption":"ADF Solutions"},"image":{"@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adfsolutions","https:\/\/x.com\/adfsolutions","https:\/\/www.linkedin.com\/company\/adf-solutions\/"]},{"@type":"Person","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39","name":"Richard T. Frawley","url":"https:\/\/adfsolutions.com\/author\/richardtfrawley\/"}]}},"_links":{"self":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/comments?post=14811"}],"version-history":[{"count":2,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14811\/revisions"}],"predecessor-version":[{"id":16447,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14811\/revisions\/16447"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media\/13155"}],"wp:attachment":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media?parent=14811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/categories?post=14811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/tags?post=14811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}