netwitness-files
Fetch file list of session from NetWitness.
netwitness-files session=SESSION
- session=SESSION
- NetWitness session ID
Output Fields
Field | Type | Name | Description |
---|---|---|---|
profile | String | Connect profile | The identifier of NetWitness connect profile |
file_name | String | File name | |
file_size | Long | File size | bytes |
md5 | String | MD5 | |
sha1 | String | SHA1 | |
info | String | File type |