Filter results down to the exact incident

Until now you could only filter a student's detail by tool and by incident. That told you where to look, but not what to look for: to check one specific thing — a copy-paste, a second face in the frame, a virtual machine — you still had to go through the whole timeline yourself.

You can now filter by the specific evidence you're after. A new sub-filter separates technical from behavioural evidence and lets you pick exactly the one you want to review, leaving the purely informative events out.

The options are built from the alarms configured for that activity, so you only ever see what that particular exam can actually produce. And the sub-filter combines with the tool and incident filters you already use, so you can narrow a review down as far as you need instead of reading everything.

Your last selection is now saved per user and comes back when you return, both in the student detail and in the results list — including "Show only results with incidents". When filters are active you'll see it at a glance, and you can clear them in one click.

We've also added the activity ID to the report, and you can search or filter by it in the results dashboard.