Reports and Privilege Logs

GoldFynch lets you generate reports of the files in your cases. This is particularly useful if you wish need to create privilege logs (paired with the [Privileged Tags] feature.)

Generating a report in GoldFynch

Here's how to generate a report of your GoldFynch case

Selecting a case

1. Log into GoldFynch and open the case that you wish to generate a report of

Navigate to the reports view, click on new reports button

2. Navigate to the 'Reports' view by clicking the Reports button in the left pane

3. Click on the + New Report button

Choose the type of report to generate

There are three types of reports that GoldFynch lets you choose from:

  1. File listing - All files: Includes all the files in the case (including zipped files and attachments)

  2. File listing - Tag: Allows you to pick tags from your case, and the report is comprised of files in the case which have those tags assigned to them

  3. File listing - Saved Advanced Search: Allows you to select a saved advanced search query. The report will consist of the files that are the results of that search query

Option 1 - File listing - All files

Includes all files in the currently-open GoldFynch case.

Choose the kind of report and the output format

Option 2 - File listing - Tag

From the displayed tags, Click on the tags whose files you would like added to the report. Find out more about tagging files here.

Select tags to be added


Selecting this option will provide you with a list of saved advanced search queries you have in your case. Click on one to select it. The report will consist of files that would have been displayed as results, had you searched with that saved search query.

Select a saved search query to create the report from

Click here to learn more about saving and loading saved advanced search queries.

Choose the report format and details

1. Enter a name for your report

2. Choose whether you want to include tag names, tag application notes, document notes, and annotations

Learn more about document notes and annotations here, tag application notes here and privileged tags here.

Click here to find out how to use the reports system to generate privilege logs.

Include tag names, application notes, document notes, and annotations

3. Select an output format for your report. The available formats are:

4. Click on the Create Report button

Accessing your report

Download your report

Deleting a case report

1. Click on the X button against the case report you wish to delete

2. Click on the Yes button on the confirmation screen that follows

NOTE: Once a case report is deleted it cannot be resorted

Click on the X button against a case report to delete it

Components of a report

Generated reports have a large amount of useful metadata on the files in the case, but not every file will use each metadata field. In cases of unused fields, they are usually left blank. In some cases (like for binary fields) they will be marked as "False." GoldFynch case reports contain the following items:

If the file is an email (email files have the MIME type "message/rfc822") it will also have information in the following fields:

Aggregate data

Microsoft Excel and CSV-formatted reports contain aggregate data on the types of the files they contain, in addition to the regular report data.

Just open such a file and click on the "File types" sheet that will be present (it will appear as a tab at the bottom of the page.)

Select tags to be added

NOTE: If you need a report on specific file types exclusively, you can run an advanced search query using the "Type" parameter, and select the file types you need. Save the query, and then run a report against the query by selecting "Advanced Search Query" as the Report type.