snapshot_storage
Creates bounded local snapshots of acquired app files and directories, including hashes, preference XML, and SQLite data, while preserving sources and reporting truncation limits.
Instructions
Create a bounded local snapshot of explicit acquired files/directories, including hashes, preference XML and SQLite data. Works on owned copies with WAL handling; never modifies source files. For before/after acquisitions use paths=[each acquisition logical_root] so relative keys match. Reports consistency and truncation limits; device atomicity is not inferred.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | ||
| paths | Yes | ||
| max_rows | No | ||
| max_files | No | ||
| max_total_bytes | No | ||
| analysis_project_id | No | Optional investigation to retain this tool result in. Does not prove target identity or causal relationships. |