Skip to content

Invoke-S1FetchFile

SYNOPSIS

Sends a request to the agent to fetch files.

SYNTAX

Invoke-S1FetchFile [-AgentID] <String> [-FilePath] <String[]> [-Password] <String> [<CommonParameters>]

DESCRIPTION

This function sends a request to the agent to fetch files. The files, if present, are placed in a password-protected zip file and transmitted back to the console. The zip file can then be retrieved from the SentinelOne activity section for fetch file operations.

EXAMPLES

EXAMPLE 1

Invoke-S1FetchFile -AgentID "agent123" -FilePath @("C:\Temp\File1.txt", "C:\Temp\File2.txt") -Password "SecurePassword123"

Sends a request to fetch the specified files from the agent and protects the zip file with the given password.

PARAMETERS

-AgentID

The Agent ID to send the command to.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-FilePath

An array of file paths to be fetched from the agent.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: True
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Password

The password to use to protect the zip file.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES