This limits the maximum disk usage, even for an unlimited amount of captured input data, only keeping the latest captured data.When you are investigating a security incident, a key element is to take notes and to document as much as possible. This will be a newly created file if the value of “Ring buffer with n files” is not reached, otherwise it will replace the oldest of the previously used files. Multiple files, ring buffer: Much like “Multiple files continuous”, reaching switch conditions of the multiple files will switch to the next file.Multiple Files, Continuous: Like the “Single named file” mode, once the switch condition of the multiple files is reached a new file is created and used.This mode place the new capture file in a specific folder. Single-Named File: A single capture file will be used.