AnsweredAssumed Answered

Extracting multiple files from the same session via REST interface

Question asked by RSA Admin Employee on Oct 19, 2015

This question is a follow-on to Using SA REST interface to extract files from network collection. One thing that I'm seeing now is that sometimes there are multiple files associated with the same session ID.

 

Now, when there are files of different extensions, I imagine I could grab them individually with different content calls...such as if there were an exe and a pdf in the same session, I imagine I could grab them individually with:

 

http://x.x.x.x:50105/sdk/content?force-content-type=text/plain&expiry=600&session=2127169&render=files&where=extention%3Dpdf&includeFileTypes=.pdf


then calling

http://x.x.x.x:50105/sdk/content?force-content-type=text/plain&expiry=600&session=2127169&render=files&where=extention%3Dexe&includeFileTypes=.exe


However, if there are multiple files with the same extension in the same sessionID, is there a way to extract them separately? Or when I make the call, do they all just get appended together in the same binary blob and I have to manually break them apart again on my end?


Any help or tips would be greatly appreciated!


Kyle

Outcomes