Use this page to upload evidence, assign evidence sources, and track files as they move through planning, discovery, processing, maintenance, and finishing. Supported Windows artifacts include EVTX event logs, Registry hives, MFT data, runtime process data, and runtime network connection data. Uploaded files are kept within the active case and logged for traceability. [ Privacy Policy ]