harness_folder_triage
Perform read-only folder triage by scanning input directories and writing forensic-copilot-compatible artifacts for investigation.
Instructions
Run read-only folder triage and write forensic-copilot-compatible artifacts.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| case_name | Yes | ||
| input_root | Yes | ||
| staging_root | No | artifacts | |
| output_root | No | reports | |
| depth | No | triage | |
| evidence_os | No | unknown | |
| evidence_mode | No | mounted-folder | |
| max_files | No | ||
| hash_small_files | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |