tracked_files

{“what”:“Unique numeric identifier for each tracked file.”,“why”:“Without it, rows cannot be uniquely referenced or updated.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.884686276+00:00”}

{“what”:“UUID of the session that discovered the file.”,“why”:“Without it, files from different runs cannot be separated or grouped.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.905657323+00:00”}

{“what”:“Name of the agent that processed the file, if any.”,“why”:“Without it, it’s unknown which agent handled the file, making attribution impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.917602333+00:00”}

{“what”:“Original file path on the source system.”,“why”:“Without it, the origin of the file is unknown, so mirroring or cleaning cannot be traced.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.931123264+00:00”}

{“what”:“Path where the file was mirrored or copied to.”,“why”:“Without it, the mirrored location is unknown, so retrieval or verification fails.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.945335292+00:00”}

{“what”:“Path where the file is stored in the archive.”,“why”:“Without it, the archived copy cannot be located for restoration.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.958251574+00:00”}

{“what”:“Hash of file content, e.g., SHA-256.”,“why”:“Without it, duplicate detection or integrity verification is impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.971305369+00:00”}

{“what”:“File size in bytes.”,“why”:“Without it, storage usage and transfer progress cannot be estimated.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:57.986140381+00:00”}

{“what”:“Method or rule that detected the file.”,“why”:“Without it, the detection source is unknown, so false positives cannot be traced.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:58.025434616+00:00”}

{“what”:“Name of the tool that processed the file.”,“why”:“Without it, the processing tool is unknown, making debugging or auditing difficult.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:58.039667908+00:00”}

{“what”:“Shell command used to process the file.”,“why”:“Without it, the exact operation performed cannot be reproduced.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:58.062776957+00:00”}

{“what”:“Timestamp when the file was mirrored, in UTC.”,“why”:“Without it, the mirroring time is unknown, so freshness or scheduling cannot be assessed.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:58.084445018+00:00”}

{“what”:“Timestamp when the file was cleaned, if cleaned.”,“why”:“Without it, it’s unknown whether and when cleanup occurred, leaving retention ambiguous.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T00:13:58.110191820+00:00”}