Automatic archiving occurs when there are too many incident partitions, or when there is insufficient disk space for the forensics repository.

Archived records are stored in a subfolder of the archive folder. They can be restored using their record ID number.