Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Datastore File → Delete File
AI-generatedOverview
This node operation deletes a specific file from a datastore based on the provided Case ID and File ID. It is useful in scenarios where you need to manage and clean up files related to digital forensic investigations or incident response cases by removing unnecessary or outdated files from the datastore.
Use Case Examples
- Deleting a file associated with a particular case in a digital forensic investigation system.
- Removing a file from the datastore to free up storage or maintain data hygiene.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to which the file belongs. Required to specify the context of the file deletion. |
| File ID | The unique identifier of the file to be deleted from the datastore. This is mandatory to identify the exact file to remove. |
| Options | Additional options for the delete operation, including whether to return the raw response from the API. |
Output
JSON
success- Indicates whether the file deletion was successful (true or false).message- Provides additional information or confirmation about the deletion operation.
Dependencies
- Requires an API key credential or authentication token to access the DFIR IRIS system's datastore API for file deletion.
Troubleshooting
- Ensure that the Case ID and File ID are correctly specified and exist in the datastore; otherwise, the deletion will fail.
- If the node returns an error about authentication, verify that the API credentials are correctly configured and have sufficient permissions.
- If the 'Return Raw' option is enabled, the output may be less user-friendly and require additional parsing.