Skip to content

Commit 9652ea5

Browse files
authored
Adds note about max file size for get-file command (#1110)
Part of #[5130](elastic/security-docs#5130). Preview:
1 parent b4d51d6 commit 9652ea5

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

solutions/security/endpoint-response-actions.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,10 @@ Required privilege (in {{stack}}) or custom role privilege (in {{serverless-shor
160160

161161
Example: `get-file --path "/full/path/to/file.txt" --comment "Possible malware"`
162162

163+
::::{note}
164+
The maximum file size that can be retrieved using `get-file` is `104857600` bytes, or 100 MB.
165+
::::
166+
163167
::::{tip}
164168
You can use the [Osquery manager integration](/solutions/security/investigate/osquery.md) to query a host’s operating system and gain insight into its files and directories, then use `get-file` to retrieve specific files.
165169
::::

0 commit comments

Comments
 (0)