How to Manage Investigations

Cado organizes evidence items into groups called Investigations, which were previously referred to as projects.

Creating an Investigation

To create a new investigation:

1. Click Investigations in the main menu.
2. Click Create Investigation.
3. Enter a unique name for the investigation.
4. Optionally, grant access to other users and provide a description.
5. Click Create to finalize.

Deleting an Investigation

If you want to delete old investigations to free up disk space, follow these steps:

1. Click Investigations and select the ⋮ menu next to the investigation you want to delete.
2. Click Investigation Settings.
3. Scroll to the bottom of the page to the Delete section.
4. Enter permanently delete in the text box.
5. Click Delete Investigation.

info

You can check available disk space by clicking the Platform menu button.

Updating an Investigation

You can modify an investigation's name and description:

1. Click Investigations and select the investigation you want to update.
2. Click the ⋮ menu next to the investigation and select Investigation Settings.
3. Make your changes and click Save Changes.

Investigation Processing

The Processing page provides a high-level overview of the processing status of evidence items. Evidence goes through several stages of analysis, and some data, such as file listings, may be available before the full processing is complete.

To view the processing status of an investigation:

1. Click Investigations and select the investigation you want to review.
2. Navigate to the Automated Investigation or Evidence tab and click the ⋮ menu.
3. Select View Processing Pipeline.

You can expand individual evidence items to see their detailed processing status.