- 08 Feb 2024
- 1 Minute to read
- Print
- Dark
Files and Directories
- Updated on 08 Feb 2024
- 1 Minute to read
- Print
- Dark
The following sensor commands perform actions against files and directories on EDR sensors.
dir_find_hash
Find files matching hashes starting at a root directory.
Platforms:
Return Event:
DIR_FINDHASH_REP
Usage:
dir_list
List the contents of a directory.
Platforms:
Return Event:
DIR_LIST_REP
Usage:
file_del
Delete a file from the endpoint.
Platforms:
Return Event:
FILE_DEL_REP
**Usage: **
file_get
Retrieve a file from the endpoint.
Note: The file_get
command is limited to 10MB in size. For files larger than 10MB, please utilize the artifact_get
command.
Platforms:
Return Event:
FILE_GET_REP
Usage:
file_hash
Compute the hash of a file.
Platforms:
Return Event:
FILE_HASH_REP
Usage:
file_info
Get file information, timestamps, sizes, etc.
Platforms:
Return Event:
FILE_INFO_REP
Usage:
file_mov
Move / rename a file on the endpoint.
Platforms:
Return Event:
FILE_MOV_REP
Usage:
log_get
log_get
is a legacy command that has been replaced with artifact_get
. You can still issue a log_get
command from the Sensor, however the parameters and output are the same as artifact_get
.