websex_foremost
Recover deleted files and carve forensic artifacts by running foremost with supplied argument tokens in an authorized engagement namespace, without shell parsing.
Instructions
Run foremost from the WebSex forensics toolkit. The container executes foremost directly with the supplied argv tokens; shell parsing is never used. Runs from the selected engagement namespace; use relative paths for engagement artifacts.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| stdin | No | ||
| arguments | Yes | ||
| engagement_id | Yes | ||
| working_directory | No | . |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||