Actions85
- Alert Actions
- Asset Actions
- Case Actions
- Comment Actions
- Datastore File Actions
- Datastore Folder Actions
- Evidence Actions
- IOC Actions
- Manage Metadata Actions
- Module Actions
- Note Actions
- Note Group Actions
- Task Actions
- Timeline Actions
Datastore Folder → Add Folder
AI-generatedOverview
This node operation adds a new folder to a datastore within a specified case. It is useful for organizing data by creating hierarchical folder structures inside a case management or digital forensic investigation system. For example, a user can add a new folder named 'Evidence' under a parent folder to categorize files related to a specific case.
Use Case Examples
- Adding a new folder named 'Project Documents' under the parent folder 'Case Files' for case ID 12345.
- Creating a subfolder 'Photos' inside an existing folder to store image evidence.
Properties
| Name | Meaning |
|---|---|
| Case ID | The unique identifier of the case to which the folder will be added. |
| Folder Name | The name of the new folder to be created. |
| Parent Folder Name or ID | The identifier or name of the parent folder under which the new folder will be created. This can be selected from a list or specified via an expression. |
| Options | Additional options for the operation, such as whether to return the raw response from the API. |
Output
JSON
folderId- The unique identifier of the newly created folder.folderName- The name of the newly created folder.parentFolderId- The identifier of the parent folder under which the new folder was created.caseId- The case ID associated with the folder.
Dependencies
- Requires an API key credential or authentication token to connect to the DFIR IRIS system or datastore service.
Troubleshooting
- Ensure the Case ID is valid and exists in the system before adding a folder.
- Verify that the Parent Folder ID or name is correct and accessible.
- If the node returns an error about permissions, check that the API key or authentication token has sufficient rights to create folders.
- If the 'Return Raw' option is enabled, the output may be unprocessed and require additional parsing.