File Data
The file data contains all attributes about a file that was flagged by Sandfly Security or a user defined sandfly for whatever reason. All attributes will be for the actual file, file link or device if found.
{
"date": {
"created": "",
"created_minutes": 0,
"modified": "",
"modified_minutes": 0,
"accessed": "",
"accessed_minutes": 0
},
"nlink": 0,
"mode": "",
"uid": 0,
"username": "",
"gid": 0,
"groupname": "",
"size": 0,
"size_mismatch": false,
"path": "",
"path_root": "",
"name": "",
"capabilities": {},
"flags_list": null,
"entropy": 0,
"hash": {
"md5": "",
"sha1": "",
"sha256": "",
"sha512": ""
},
"magic_num": {
"hex": "",
"text": "",
"type": "",
"class": "",
"expected_extensions": null
},
"mount": {
"mountpoint": "",
"device": "",
"fs_type": ""
},
"container": {
"id": "",
"id_short": "",
"rootdir": ""
}
}