MDE LiveResponse Downloading File Fails

%3CLINGO-SUB%20id%3D%22lingo-sub-2846436%22%20slang%3D%22en-US%22%3EMDE%20LiveResponse%20Downloading%20File%20Fails%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2846436%22%20slang%3D%22en-US%22%3E%3CP%3EI%20was%20playing%20with%20LiveResponse%20and%20the%20'BackupEventLog.ps1'%20script%20from%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FYongRhee-MDE%2FLiveResponse%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FYongRhee-MDE%2FLiveResponse%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewhich%20creates%20a%20file%20around%2097MB%2C%20well%20below%20the%203GB%20limit.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20tried%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3Egetfile%20'file'%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20tried%20downloading%20in%20the%20background%26nbsp%3B%3C%2FP%3E%3CP%3Edownload%20'file'%20%26amp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ebut%20it%20won't%20download.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20download%20slightly%20smaller%20files...(67MB)%3C%2FP%3E%3CP%3E%3CSPAN%3Egetfile%20C%3A%5CWindows%5CSystem32%5Cwinevt%5CLogs%5CMicrosoft-Windows-Sysmon%254Operational.evtx%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EDoes%20anyone%20know%20if%20there's%20something%20else%20I%20was%20supposed%20to%20do%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2858547%22%20slang%3D%22en-US%22%3ERe%3A%20MDE%20LiveResponse%20Downloading%20File%20Fails%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2858547%22%20slang%3D%22en-US%22%3EThanks%20for%20posting.%20I%20am%20asking%20our%20team%20to%20see%20if%20they%20can%20provide%20some%20additional%20details%20and%20insights.%20Will%20follow%20up%20once%20I%20have%20more%20info.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2865197%22%20slang%3D%22en-US%22%3ERe%3A%20MDE%20LiveResponse%20Downloading%20File%20Fails%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2865197%22%20slang%3D%22en-US%22%3EHey%20Daniel%2C%20thank%20you%2C%20it's%20much%20appreciated!%3C%2FLINGO-BODY%3E
Occasional Contributor

I was playing with LiveResponse and the 'BackupEventLog.ps1' script from 

https://github.com/YongRhee-MDE/LiveResponse

 

which creates a file around 97MB, well below the 3GB limit. 

 

I've tried  

getfile 'file' 

 

I've tried downloading in the background 

download 'file' &

 

but it won't download.  

 

I can download slightly smaller files...(67MB)

getfile C:\Windows\System32\winevt\Logs\Microsoft-Windows-Sysmon%4Operational.evtx

 

Does anyone know if there's something else I was supposed to do? 

 

 

3 Replies
Thanks for posting. I am asking our team to see if they can provide some additional details and insights. Will follow up once I have more info.
Hey Daniel, thank you, it's much appreciated!
Anything?
www.000webhost.com