carve

Carve

$ ./osctrl-cli carve -h
NAME:
   osctrl-cli carve - Commands for file carves

USAGE:
   osctrl-cli carve command [command options] [arguments...]

COMMANDS:
   complete, c      Mark an file carve query as completed
   delete, d        Mark a file carve query as deleted
   expire, e        Mark a file carve query as expired
   run, r           Start a new carve for a file or a directory
   list, l          List file carves
   list-queries, l  List file carves queries
   help, h          Shows a list of commands or help for one command

OPTIONS:
   --help, -h  show help

Complete carve

$ ./osctrl-cli carve complete -h
NAME:
   osctrl-cli carve complete - Mark an file carve query as completed

USAGE:
   osctrl-cli carve complete [command options] [arguments...]

OPTIONS:
   --name value, -n value  Carve name to be completed
   --env value, -e value   Environment to be used
   --help, -h              show help

Delete carve

$ ./osctrl-cli carve delete -h
NAME:
   osctrl-cli carve delete - Mark a file carve query as deleted

USAGE:
   osctrl-cli carve delete [command options] [arguments...]

OPTIONS:
   --name value, -n value  Carve name to be deleted
   --env value, -e value   Environment to be used
   --help, -h              show help

Expire carve

$ ./osctrl-cli carve expire -h
NAME:
   osctrl-cli carve expire - Mark a file carve query as expired

USAGE:
   osctrl-cli carve expire [command options] [arguments...]

OPTIONS:
   --name value, -n value  Carve name to be expired
   --env value, -e value   Environment to be used
   --help, -h              show help

Run carve

$ ./osctrl-cli carve run -h
NAME:
   osctrl-cli carve run - Start a new carve for a file or a directory

USAGE:
   osctrl-cli carve run [command options] [arguments...]

OPTIONS:
   --path value, -p value        File or directory path to be carved
   --env value, -e value         Environment to be used
   --uuid value, -u value        Node UUID to be used
   --expiration value, -E value  Expiration in hours (0 for no expiration) (default: 6)
   --help, -h                    show help

List carves

$ ./osctrl-cli carve list -h
NAME:
   osctrl-cli carve list - List file carves

USAGE:
   osctrl-cli carve list [command options] [arguments...]

OPTIONS:
   --env value, -e value  Environment to be used
   --help, -h             show help

List carve queries

$ ./osctrl-cli carve list-queries -h
NAME:
   osctrl-cli carve list-queries - List file carves queries

USAGE:
   osctrl-cli carve list-queries [command options] [arguments...]

OPTIONS:
   --all, -A              Show all file carves queries (default: false)
   --active, -a           Show active file carves queries (default: false)
   --completed, -c        Show completed file carves queries (default: false)
   --expired, -E          Show expired file carves queries (default: false)
   --deleted, -d          Show deleted file carves queries (default: false)
   --env value, -e value  Environment to be used
   --help, -h             show help