Skip to main content


This Script is part of the D2 (Deprecated) Pack.#

Copies a file from an entry to the destination path on the specified system. This uses the dissolvable agent's HTTPS communication channel rather than SCP or other out-of-band methods.

Example usage: !CopyFileD2 destpath=/home/sansforensics/collectedbinaries/inv8_suspiciousPE1.exe.evil entryid=21@8 system=Analyst1

Script Data#

Script Typejavascript
Tagsutil, server


Argument NameDescription
systemThe system to which we want to copy the file.
destpathThe full filesystem path and filename under which to save the file.
entryidThe ID of the War Room entry containing the file to copy.
forceThe overwrite file.


There are no outputs for this script.