Title
#fleet
b

benbass

11/10/2020, 9:00 PM
Are there any docs on the file carving in 3.3.0? I haven’t used file carving at all and am not quite sure where to start.
Noah Talerman

Noah Talerman

11/10/2020, 9:10 PM
b

benbass

11/10/2020, 9:12 PM
Awesome, thanks!
9:39 PM
I have carving working now, but I have a question as to where on the fleet server does the carve get saved? In the mysql db, or on disk on the fleet server?
zwass

zwass

11/10/2020, 10:29 PM
The blocks are stored in the MySQL DB and purged after 24 hours.
10:29 PM
As of now it's expected that you will download the carve through fleetctl and store it somewhere. I imagine we will add plugins to automatically save to S3, etc.
b

benbass

11/10/2020, 11:39 PM
Awesome, I was more wondering about where I needed to make sure I had enough storage allotted, either to the fleet server or the DB.