Open Discussion

Expand all | Collapse all

Pulling File List from Device Backup

  • 1.  Pulling File List from Device Backup

    Posted 09-16-2020 19:00
    I am looking for a way to pull the file list (with full file path, as seen in Web Restore) from a particular device as an inventory of the device without pulling any of the files down.  What's the easiest way to do this?  Does this also apply to files that have been deleted?  Looking for export in a CSV or any type of other consumable report.

    Thanks!

    ------------------------------
    Kyle Kelly
    Litigation Support Specialist
    San Francisco CA
    ------------------------------


  • 2.  RE: Pulling File List from Device Backup

    Posted 09-17-2020 03:32
    Hi Kyle,

    Retrieving individual file paths is a bit tricky from the console, as the data needs to be built from the archive. There isn't really a file server-side that has these paths laid out in a way where we can quickly grab them.

    Depending on your requirements, there are a couple of things you could do;

    1. Use the Forensic Search to see where a particular file exists.
    2. Have a look at the logs on the device (backup_files.log.0 etc), which contains a log of the files being backed up. It's possible the exact file you want isn't in there as the logs do roll over, but it might be worth a shot.

    I have an open feature request for something that this would be a good use case for, so I'm going to add this over there.

    Let me know if you have any questions.

    Best Regards
    Ben

    ------------------------------
    Ben Alldridge
    Minneapolis MN
    ------------------------------



  • 3.  RE: Pulling File List from Device Backup

    Posted 09-17-2020 11:17
    Hi Ben,

    Thanks for the reply!  Unfortunately the alternative methods won't work as I am looking for multiple folders worth of files, and not just one specific file.

    I appreciate you putting in the feature request, let me know if you would need any additional requirements to the ask.

    With all that being said, would it be best to collect all the files available (active and deleted) and then pull together a report from that web restore?

    Thank again,

    Kyle

    ------------------------------
    Kyle Kelly
    Litigation Support Specialist
    San Francisco CA
    ------------------------------



  • 4.  RE: Pulling File List from Device Backup

    Posted 09-17-2020 12:25

    Kyle,

    There are alternative methods using the API to get this data (option 1 or option 2).  The data returned is in JSON format, requires the correct permissions, and the API method need to be properly authenticated (which require additional API calls).  Unfortunately, the documentation is minimal .  Both methods are a bit slow and don't scale to getting "all" of your device archive manifests.

    But the better solution is using our File Metadata Collection (FMC) feature that's part of our Incyder product, but you'll still need to reformat the results.  Our SDK and CLI tools could simplify the process of getting the data using FMC.



    ------------------------------
    Paul Hirst
    TAM Manager
    Code42
    ------------------------------



Polls