commonfields: id: CopyFileD2 version: -1 name: CopyFileD2 script: '' type: javascript tags: - util - server comment: |- Copy a file from an entry to the destination path on the specified system. This uses the dissolvable agent's HTTPS communication channel rather than scp or other out-of-band methods. Example usage: !CopyFileD2 destpath=/home/sansforensics/collectedbinaries/inv8_suspiciousPE1.exe.evil entryid=21@8 system=Analyst1 enabled: true system: true args: - name: system required: true description: System to which we want to copy the file - name: destpath required: true description: Full filesystem path and filename under which to save the file - name: entryid required: true description: ID of the war room entry containing the file to copy - name: force auto: PREDEFINED predefined: - "true" - "false" description: Overwrite file scripttarget: 0 runas: DBotWeakRole tests: - No test - D2 test are not supported yet in content tests fromversion: 5.0.0