Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//ORCON//NOFORN
This is the size of the file scanned on the target as reported by Windows.
In the example above, the size of the file scanned is 1 mebibyte.
Create Time
The create time is the value stored in the windows file meta data describing the
date and time that the file was originally created.
In the example above, the scanned file was created on December 5
th
, 2011 at
12:11:23.
Modified Time
The modified time is the value stored in the Windows file meta data describing
the data and time that the scanned file was last modified.
In the example above, the scanned file was last modified on December 5
th
, 2011
at 12:11:23.
Accessed Time
The accessed time is the value stored in the Windows file meta data describing
the data and time that the scanned file was last opened for any reason.
In the example above, the scanned file was last accessed on December 5
th
, 2011
at 04:24:11 PM.
Get Walk Result
The get walk result tag will only exist in results for either get or get walk
requests. The tag contains information gathered while copying the file data for
transmission to the LP. Examples and descriptions of the get walk result fields
are below.
XML Example
<GetWalkResult>
<FileDataSize>5m</FileDataSize>
<GetResult>ASN_SUCCESS</GetResult>
<GetWinResult>0</GetWinResult>
<LocalFileName>data\test2.txt</LocalFileName>
</GetWalkResult>
Field Definitions
File Data Size
File data size is the size of the data captured by the request. This value
can be different than the file size captured by the scan for multiple
reasons, to include offsets, byte size limits, and read errors.
In the example above, the file data size was provided as 5 mebibytes.
Get Result
148
SECRET//ORCON//NOFORN