Workflow

1. Upload Evidence Data

Begin by uploading your evidence data such as EVTX files or MFT data. Our platform supports a seamless upload process to ensure that your files are securely received and ready for analysis.

2. Wait for Processing Completion

Once your files are uploaded, our system will begin processing the data. This step involves thorough analysis to identify potential threats. Please wait until processing is complete; you'll receive a notification when it's ready for review.

3. Review Threat Detections

After processing, you can access a detailed report of the threat detections identified within your data. Our user-friendly interface allows you to review and analyze the findings comprehensively, providing insights and actionable recommendations.

4. Analyse Artifacts: Windows Event Logs | Windows MFT

You can also review processed artifacts individually, allowing for deeper analysis of specific data types, such as Windows Event Logs and MFT data.

5. Review the Timeline

Next, delve into the prepared timeline for a chronological view of events and detections, helping you to contextualize the identified threats more effectively.

6. Export Data

Finally, you have the option to export the processed data and reports. This feature enables you to save the findings in a format that suits your needs, whether for documentation, further analysis, or reporting purposes.