WinRAR
Purpose
Use this skill for approved archive packaging when the assessment needs a Windows-native or environment-specific archive workflow.
Phase Fit
- Primary: Validation and Controlled Impact Demonstration
- Secondary: Reporting, Retest and Closure
Use When
- Need to package approved evidence or sample data in a Windows environment.
- Need to validate whether compressed archives affect an approved transfer path.
- Need a repeatable archive workflow for retest.
Avoid When
- Archive scope exceeds the approved proof path.
- Passwording or staging archives is not explicitly approved.
Inputs
- Approved file scope
- Archive and retention requirements
- Transfer or reporting goal
Procedure
- Archive only the minimum approved file set.
- Record exact archive options and file scope.
- Use the archive only for the approved objective.
- Preserve or dispose of the archive according to engagement rules.
- Repeat the same packaging path during retest if needed.
Command Syntax
Replace sample paths with approved in-scope files.
:: Create an archive
Rar.exe a contoso-evidence.rar evidence\
:: Create a password-protected archive
Rar.exe a -p<password> contoso-evidence.rar evidence\
:: AES-256 encryption with RAR5 format
Rar.exe a -p<password> -ma5 -m5 contoso-evidence.rar evidence\
:: Split archive into 100 MB parts
Rar.exe a -v100m contoso-large.rar C:\large-folder\
:: List contents
Rar.exe l contoso-evidence.rar
:: Extract archive
UnRAR.exe x contoso-evidence.rar C:\temp\out\
Evidence to Capture
- Exact file scope placed into the archive
- Archive options and resulting artifact path
- Why archive packaging mattered to the assessment objective
Safety Boundaries
- Keep archive scope minimal and approved.
- Protect archives as sensitive evidence when they contain assessment data.