Create a portable case

Create a portable case to share evidence from an investigation with stakeholders who might not be forensic examiners and might not have access to a full version of Magnet AXIOM Cyber. You can choose which evidence items you want to include, share all of the evidence you recovered with Magnet AXIOM Cyber, or choose specific evidence items such as tagged evidence.

You can also use a template that specifies artifact types, columns, and format options.

Timeline data is not included in the portable case. To view the timeline, the reviewer can build the timeline in the portable case.

  1. In AXIOM Examine, right-click an artifact group or items that you want to include in the portable case.
  2. Click Create export / report.
  3. Under Export / report format, select Portable case.
  4. Follow the instructions to customize and create your portable case.