differentiate evidence files based on mappings