[FR] Allow bulk upload of evidence information
Is your feature request related to a problem? Please describe.
Currently, uploading evidence is a manual and time-consuming process using the GUI. This becomes particularly frustrating when dealing with large amounts of evidence, as the repetitive task slows down the workflow and reduces efficiency.
Describe the solution you'd like
I would like to see a feature added that enables the bulk upload of evidence using CSV files, similar to the existing functionality for uploading IoCs, Assets, and Timelines. This would allow users to prepare evidence data in a standardized CSV format and upload it in one operation, significantly streamlining the process.
Describe alternatives you've considered
- Continuing to manually upload evidence through the GUI, though this is inefficient for large cases.
- Developing a custom script to interact with the API for bulk evidence uploads, but this requires additional resources and maintenance. It also is complicated by our security measures that prevent access to IRIS directly.
Additional context
This feature would improve efficiency for teams handling high volumes of evidence, particularly in time-sensitive investigations. Including a sample CSV template and validation feedback during uploads would also enhance usability.