Evidence Locker
Every artifact you collect is hashed, timestamped, and bound to an investigation for grading.
Artifacts collected
214
+18 this week
Collection rate
91%
+6% this month
Required outstanding
6
across 3 investigations
Chain of custody
100%
verified
Collected artifacts
| ID | Artifact | Type | Investigation | Severity | SHA-256 | Collected by | When |
|---|---|---|---|---|---|---|---|
| EVD-9014 | message_trace_INV-3181.csv | Message trace | INV-3181 | critical | 9f2c…41ab | J. Doe | 12m ago |
| EVD-9013 | signin_logs_kate.morgan.json | Identity log | INV-3182 | high | 4de1…0c77 | J. Doe | 38m ago |
| EVD-9012 | proc_tree_SRV-DB-07.txt | Process tree | INV-3178 | critical | b710…9e12 | P. Nair | 1h ago |
| EVD-9011 | invoice_update.docm | Attachment | INV-3181 | high | cc09…7a54 | A. Ward | 2h ago |
| EVD-9010 | oauth_consent_grant.json | Cloud audit | INV-3179 | medium | 1a88…33f0 | J. Doe | 3h ago |
| EVD-9009 | usb_insert_events.evtx | Endpoint log | INV-3177 | medium | 77bd…5cd1 | Y. Demir | yesterday |
Coverage by source
- Identity96%
- Endpoint88%
- Email93%
- Cloud84%
- Network71%
Grading impact
- Evidence weight40% of score
- Correct conclusion35% of score
- ATT&CK mapping15% of score
- Time to resolution10% of score