CopyFileD2

Copy a file from an entry to the destination path on the specified system. This uses the dissolvable agent's HTTPS communication channel rather than scp or other out-of-band methods. Example usage: !CopyFileD2 destpath=/home/sansforensics/collectedbinaries/inv8_suspiciousPE1.exe.evil entryid=21@8 system=Analyst1

javascript · D2 (Deprecated)

Details

ID	`CopyFileD2`
Language	javascript
From Version	5.0.0
Tags	util server

README

Copies a file from an entry to the destination path on the specified system. This uses the dissolvable agent’s HTTPS communication channel rather than SCP or other out-of-band methods.

Example usage: !CopyFileD2 destpath=/home/sansforensics/collectedbinaries/inv8_suspiciousPE1.exe.evil entryid=21@8 system=Analyst1

Script Data

Name	Description
Script Type	javascript
Tags	util, server

Inputs

Argument Name	Description
system	The system to which we want to copy the file.
destpath	The full filesystem path and filename under which to save the file.
entryid	The ID of the War Room entry containing the file to copy.
force	The overwrite file.

Outputs

There are no outputs for this script.

Source

CopyFileD2.js CopyFileD2.yml

Download History Raw

commonfields:
  id: CopyFileD2
  version: -1
name: CopyFileD2
script: ''
type: javascript
tags:
- util
- server
comment: |-
  Copy a file from an entry to the destination path on the specified system. This uses the dissolvable agent's HTTPS communication channel rather than scp or other out-of-band methods.
  Example usage: !CopyFileD2 destpath=/home/sansforensics/collectedbinaries/inv8_suspiciousPE1.exe.evil entryid=21@8 system=Analyst1
enabled: true
system: true
args:
- name: system
  required: true
  description: System to which we want to copy the file
- name: destpath
  required: true
  description: Full filesystem path and filename under which to save the file
- name: entryid
  required: true
  description: ID of the war room entry containing the file to copy
- name: force
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Overwrite file
scripttarget: 0
runas: DBotWeakRole
tests:
- No test - D2 test are not supported yet in content tests
fromversion: 5.0.0