netwitness-files
Fetch file list of session from NetWitness.
netwitness-files session=SESSION
- session=SESSION
- NetWitness session ID
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | The identifier of NetWitness connect profile |
| file_name | String | File name | |
| file_size | Long | File size | bytes |
| md5 | String | MD5 | |
| sha1 | String | SHA1 | |
| info | String | File type |