Hi , Is "file carving" supported on Kolide fleet? If yes, any pointer to documentation for setting file carving on kolide fleet .( like the path to downloaded files etc )

No, I don't think the carver is supported.

Any possibility of adding this feature in near future or get it in with some support agreement?

I don’t think that’s on our roadmap, but I think we would review a PR if you submitted it.

Yeah I'd be happy to do it on a consulting basis, or review a PR. Strongly recommend putting up a blueprint issue to discuss how the implementation will work if someone else is going to submit.

Thanks @seph . @zwass . I am still evaluating and gathering the requirements . Once it's gets frozen , can discuss it further with you. We might need experts support and are open for consultant option.

Great! Feel free to DM me or you can email me at zach@dactiv.llc. What organization are you from?