You are here: Analyst's functions > Evidence analysis > Evidence export data

Evidence export data

Export data

Data required to export evidence is described below.

IMPORTANT: only evidence that meets the specified criteria will be exported!

Data Description

From

To

Time range for the evidence to be exported.

Acquisition It considers the date as the evidence acquisition date on the target device.
Receipt It considers the date as the evidence receipt date.

Relevance

Level of relevance for the evidence to be exported.

Type

Types of evidence to be exported.

NOTE: when no type of evidence is selected, RCS automatically exports all types.

Report

If selected, only evidence with the Report field selected will be exported. Notes can be included or excluded from the export.

Report name

Exported file name. By default, RCS names the file as follows:

Evidence exported from page File name
Target

target name - agent name - Evidence Export.tgz

Agent

agent name - Evidence Export.tgz

Export commands

Export evidence commands are described below.

Command Description
Export file Starts file export.
Export to connector

Starts evidence export to the connector.

NOTE: the function is only enabled if the user has Connector management authorization.

RCS9.5 | User manual | © COPYRIGHT 2014