MinIO (S3-compatible Storage)
MinIO is a high-performance S3-compatible object storage server — store forensic artifacts, datasets, backups, and pipeline outputs using any S3 tool or SDK.
Aithroyz deploys MinIO with an admin account pre-created. The S3 API endpoint is at
https://s3.<env-name>.ops.aithroyz.com and accepts any AWS SDK or CLI.Access
Console URL:
https://minio.<env-name>.ops.aithroyz.comS3 API URL:
https://s3.<env-name>.ops.aithroyz.comCredentials: Access key and secret key shown in Environments detail → Credentials panel.
AWS CLI usage
The standard AWS CLI works with MinIO — just point it at the S3 endpoint.
# Configure credentials
aws configure
# AWS Access Key ID: <minio-access-key>
# AWS Secret Access Key: <minio-secret-key>
# Default region: us-east-1
# Default output format: json
# List buckets
aws s3 ls --endpoint-url https://s3.<env-name>.ops.aithroyz.com
# Upload a file
aws s3 cp ./artifact.zip s3://forensics/ \
--endpoint-url https://s3.<env-name>.ops.aithroyz.com
# Sync a local directory to a bucket
aws s3 sync ./evidence/ s3://forensics/case-001/ \
--endpoint-url https://s3.<env-name>.ops.aithroyz.comPython boto3 example
Use boto3 with the endpoint_url parameter to connect to MinIO from any Python script or notebook.
import boto3
s3 = boto3.client(
"s3",
endpoint_url="https://s3.<env-name>.ops.aithroyz.com",
aws_access_key_id="<minio-access-key>",
aws_secret_access_key="<minio-secret-key>",
region_name="us-east-1",
)
# Upload a file
s3.upload_file("local_artifact.zip", "forensics", "case-001/artifact.zip")
# Download a file
s3.download_file("forensics", "case-001/artifact.zip", "downloaded.zip")
# Generate a presigned URL (valid for 1 hour)
url = s3.generate_presigned_url(
"get_object",
Params={"Bucket": "forensics", "Key": "case-001/artifact.zip"},
ExpiresIn=3600,
)
print(url)Tips
✓
Use presigned URLs to share forensic artifacts with external analysts or stakeholders without giving them MinIO credentials. URLs expire after the time you specify.
ℹ
Bucket policies default to private. Create service accounts in the MinIO console with scoped read-only policies for tools that only need to read — not write.
✓
Enable bucket versioning for compliance use cases — MinIO keeps every version of every object, giving you a tamper-evident chain of custody for forensic artifacts.
ℹ
Velociraptor can ship collected artifacts directly to an S3-compatible sink. Set the S3 endpoint to the MinIO API URL and provide the access key and secret in the Velociraptor server config.