Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Datastore File → Download File
AI-generatedOverview
This node operation downloads a file from a datastore based on a specified Case ID and File ID. It is useful in scenarios where users need to retrieve specific files related to digital forensic investigations or incident response cases stored in a centralized datastore. For example, a user can download evidence files or logs associated with a particular case for further analysis.
Use Case Examples
- Download a forensic image file from a case datastore using the Case ID and File ID.
- Retrieve a log file from the datastore to review incident details.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case from which the file will be downloaded. |
| File ID | The unique identifier of the file to be downloaded from the datastore. |
| Put Output File in Field | The name of the binary output field where the downloaded file will be stored. |
| Set New File Name | Optional field to specify a new name for the downloaded file. |
Output
Binary
The downloaded file is output as binary data in the specified binary field.
JSON
cid- The Case ID associated with the downloaded file.file_id- The File ID of the downloaded file.fileName- The name of the downloaded file, either original or renamed if specified.
Dependencies
- Requires connection to the DFIR IRIS system or datastore API with appropriate authentication credentials.
Troubleshooting
- Ensure the Case ID and File ID are correct and exist in the datastore to avoid file not found errors.
- Verify that the API credentials or authentication tokens are valid and have sufficient permissions to access the datastore.
- If the file fails to download, check network connectivity and API endpoint availability.