AnsweredAssumed Answered

Extracting files

Question asked by Michael Pochan on Oct 24, 2016
Latest reply on Oct 25, 2016 by Christopher Ahearn

Is there a way to export files (attachments) from recreated events that doesn't involve having to download the attachments? We're looking for a way to extract reconstructed files from sessions and have them emailed to an address we can access on our dirty network for analysis. Is there any way to do this via scripts or NwConsole? Any information or suggestions would be welcome. netwitness packets download file malware_analysis malware file export email transport

Outcomes