01 / Start with evidence
Bring the right configuration.
Use a saved configuration or collect a selected device and its supporting evidence. Keep missing captures visible from the start.
- Where
- On your network
- You get
- Source files with device and collection context
- Availability
- Public collectors; platform coverage varies

