Case templates are a convenient way to save processing details within BlackLight. Comprising of your commonly used search terms, saved file filters, tag groups, and ingestion options, you are able to mass customize how BlackLight processes your evidence. Just follow the steps below!
1- Click on File –> Save Case Template… to open the Save window within BlackLight where you can check and uncheck which options you would like to save to your template
2- Click on File –> Export Case Template… to open your computer’s File Explorer/Finder window to designate where to save your template as a database file
3- To move your template across platforms, make sure you have a drive attached that both operating systems can read/write to:
- As tempting as it is to choose ExFAT, we do not recommend using ExFAT with macOS. Instead, a drive formatted as FAT32 is a more reliable choice.
- If the case template is larger than 4 GB or you just don't want to use FAT32, then we recommend using drivers by Paragon, either HFS+ for Windows or NTFS for Mac.
- Another option would be to upload the case template file to network or cloud storage and download it on a different machine.
4- Open a case file on the analysis machine you are moving to and click File –> Import Case Template… to apply your template to BlackLight
5- Close the case file and create a new case to start processing evidence with your newly customized template options.
For information on moving case files between analysis machines, please see this article.