Patent ID: 11451569

Abstract:
A method is provided of extracting file content from a live stream of network data streaming multiple files. The method includes receiving artifact chunks each including a portion of file content of a file of the multiple files as identified by DPI at first capture of the network data, storing the artifact chunks in an artifact chunk section of an artifact store for linearly storing the artifact chunks in an order as received, storing artifact chunk information (ACI) for each artifact chunk in a chunk table section of the artifact store, the ACI identifying the artifact chunk, identifying another artifact chunk of the file, and identifying a location of the artifact chunk in the artifact chunk section, and storing a unique artifact locator identifier (ALI) that uniquely identifies a storage location within the artifact store of an artifact chunk associated with file, wherein the ALI and ACI associated with the artifact chunks are configured to locate each artifact chunk associated with the file that is stored in the artifact store for future reconstruction of the file.