Handling Evidence

Pre-requisites

You’ll need to have Macha EST installed and configured, and have an account created under your organisation’s Azure Portal. You will also need to have generated keys saved to your the Macha EST client on your machine and to have created a case for the evidence. Please refer to the:

1. Getting Started
2. Account management
3. Keys management
4. Case management

For more information.

Evidence

Uploading Evidence

1. To upload evidence, click the + New button on the top right of the evidence section.
2. Click the dashed box to select the file you want to upload, or drag and drop the file into the box.
3. Add a description for the evidence.
4. Click the Upload button to upload the evidence, and monitor the upload progress at the bottom of the dialog.

Evidence upload flow

Downloading Evidence

1. To download evidence, click on the evidence you want to download.
2. You will be prompted to choose a location to save the evidence to.
3. After choosing a location, the download will begin, and you can monitor the download progress at the bottom left of the screen.

Deleting Evidence

Evidences are tied to the cases they are uploaded to, and cannot be deleted individually. To delete an evidence, you will need to delete the case it is associated with.