Get StartedGetting Started
Report Generation
Export investigative findings, evidence summaries, and IOCs into PDF or DOCX formats using case data and predefined templates. Reports are generated asynchronously based on the data populated within a specific case.
Prerequisites
Before initiating a report, ensure the following conditions are met:
- Populated Case Data: Add data to the case (e.g., Findings, Evidence Summary, Requirements) so the report has content to include.
- Template Configuration: Active report templates must be configured in Settings > Templates.
Generation Workflow
- Select Target Case: Navigate to Cases and open the specific case for which you need a report.
- Access Report Tab: Select the Reports tab from the case header navigation.
- Click Generate Report, then select the desired Template and Output Format (PDF or DOCX).
- Retrieve Output: The report appears in the reports list. Click the Download icon to download the generated report.
Note
To approve the report, click the Approved button.
- Report Output: The downloaded file (PDF or DOCX) contains the full report: cover page, table of contents, executive summary, case timeline, findings, evidence, and other sections defined by the template.
Create Case
Initialize a new incident response case to begin tracking evidence, findings, and investigative tasks.
Process Triage Package
Transform raw evidence into structured, searchable data. Triage packages serve as the container for uploaded artifacts and the execution context for parsing engines.