Entity Types
Jump to navigation
Jump to search
This is an enumeration of the interesting tidbits of analytic value.
This information is also kept in the [EntityType] database table.
| Name | Value | Meaning | Sample |
|---|---|---|---|
ENTITY_TYPE_UNKNOWN
|
0 | The type of entity is not known | |
ENTITY_TYPE_ACCOUNT
|
1 | Any form of account identifier | O2web
|
ENTITY_TYPE_CREDIT_CARD_NUMBER
|
2 | A credit card number | 4377-4378-6799-3241
|
ENTITY_TYPE_EMAIL_ADDRESS
|
3 | An Email Address | john@doe.com
|
ENTITY_TYPE_MAC_ADDRESS
|
4 | A 40-bit MAC address of a network card. vendor lookup | 221A828E66A5
|
ENTITY_TYPE_PERSON
|
5 | The name of a person | John Doe
|
ENTITY_TYPE_PHONE_NUMBER
|
6 | A phone number | 2025551212 |
ENTITY_TYPE_SEARCH_TERM
|
7 | Something the user searched for | cool wallpapers
|
ENTITY_TYPE_TRACKING_NUMBER
|
8 | A package tracking number | |
ENTITY_TYPE_SERIAL_NUMBER
|
9 | A serial number | R5CR105S4QF
|
ENTITY_TYPE_IMEI
|
10 | International Mobile Equipment Identity (IMEI) | 352859302198575
|
ENTITY_TYPE_IMSI
|
11 | International Mobile Subscriber Identity (IMSI) | 310410973162939
|
ENTITY_TYPE_TMSI
|
12 | Temporary Mobile Subscriber Identity (TMSI) | |
ENTITY_TYPE_ICCID
|
13 | Integrated Circuit Card ID or SIM card serial number (ICCID) | 89014103279131609377
|
ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE
|
14 | Spooled Document Title | |
ENTITY_TYPE_YOUTUBE_VIDEO_ID
|
15 | YouTube Video ID | lbM1bW7GiuQ
|
ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER
|
16 | Facebook Account Number | 100073561484450
|
ENTITY_TYPE_AIRLINE_RESERVATION
|
17 | Airline Reservation | |
ENTITY_TYPE_DELL_SERVICE_TAG
|
18 | A Dell Computer Service Tag | BYSPG32
|
ENTITY_TYPE_APPLE_UDID
|
19 | An Apple Unique Device ID (UDID) | 00008101-001875081AF4003B
|
ENTITY_TYPE_FILE_PATH
|
20 | A file path | |
ENTITY_TYPE_VOLUME_SERIAL_NUMBER
|
21 | A serial number assigned to a logical volume by the operating system | D8CE759A
|
ENTITY_TYPE_VOLUME_NAME
|
22 | The name of a volume in a file system | SAMS WORK
|
ENTITY_TYPE_MACHINE_NAME
|
23 | The name of a computer or device | John's Galaxy S20 5G
|
ENTITY_TYPE_ANDROID_ADVERTISING_ID
|
24 | The identifier assigned to Android devices for advertising | 687bd36c-3063-c53b-e944-37fb00001c8f
|
ENTITY_TYPE_SSID
|
25 | The WiFi Service Set ID (SSID) or network name | ASUS_Guest1
|
ENTITY_TYPE_PASSWORD
|
26 | A password | P@ssw0rd123!
|
ENTITY_TYPE_USB_DEVICE
|
27 | A USB device | USB VID 2008 PID 2018
|
ENTITY_TYPE_SHARE_NAME
|
28 | A windows file share name | |
ENTITY_TYPE_LIMEWIRE_CLIENT_ID
|
29 | A LimeWire Client Identifier | |
ENTITY_TYPE_PRODUCT_KEY
|
30 | A Windows product license key | DHR69-3H8RP-QXQXS-CB3BM-HT7XW
|
ENTITY_TYPE_GOOGLE_PLUS_ID
|
31 | A Google Plus Profile ID | 116104691595884789451
|
ENTITY_TYPE_DISNEY_GUEST_ID
|
32 | An identifier of a guest at Disney | |
ENTITY_TYPE_MACHINE_GUID
|
33 | A GUID assigned to a machine by Microsoft | aecfbeea-dc8a-4a56-8155-38266cbb5427
|
ENTITY_TYPE_STEAM_ACCOUNT_ID
|
34 | A Steam game network account identifier | |
ENTITY_TYPE_STEAM_PERSONA
|
35 | A persona on the Steam game network | |
ENTITY_TYPE_STEAM_NAME
|
36 | A name used in a Steam game | |
ENTITY_TYPE_TOR_HIDDEN_SERVICE
|
37 | An identifier of a Tor Hidden Service | |
ENTITY_TYPE_NT_PASSWORD_HASH
|
38 | A hash of a Windows NT logon password | 209c6174da490caeb422f3fa5a7ae634
|
ENTITY_TYPE_AUTHOR
|
39 | The author of a document | Administrator
|
ENTITY_TYPE_OGG_SERIAL_NUMBER
|
40 | The data stream serial number in an Ogg multimedia file | |
ENTITY_TYPE_CRYPTO_KEY_ID
|
41 | The identifier of a cryptographic key | |
ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER
|
42 | The account number of a WhatsApp user | 15014650535
|
ENTITY_TYPE_BITLOCKER_RECOVERY_KEY
|
43 | A recovery key for a BitLocker encrypted volume | |
ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID
|
44 | A Snapchat account identifier | 18746dd0-ca88-4d15-be29-f14ffb9c0f77
|
ENTITY_TYPE_TWITTER_ACCOUNT_ID
|
45 | A Twitter account identifier | 1448294400921116666
|
ENTITY_TYPE_APPLE_AUTHENTICATION_ID
|
46 | An Apple authentication identifier | |
ENTITY_TYPE_KIK_ACCOUNT_ID
|
47 | A Kik Account identifier | |
ENTITY_TYPE_VIBER_ID
|
48 | A Viber identifier | |
ENTITY_TYPE_VIBER_MEMBER_ID
|
49 | A Viber Member identifier | |
ENTITY_TYPE_DISK_SIGNATURE
|
50 | A 32-bit Master Boot Record identifier at offset 440 of the sector | 1619F01B
|
ENTITY_TYPE_AES_128_KEY
|
51 | A 128-bit AES encryption key | |
ENTITY_TYPE_AES_192_KEY
|
52 | A 192-bit AES encryption key | |
ENTITY_TYPE_AES_256_KEY
|
53 | A 256-bit AES encryption key | 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
|
ENTITY_TYPE_WICKR_ACCOUNT_ID
|
54 | A WICKR account identifier | |
ENTITY_TYPE_APPLE_DSID
|
55 | An Apple Directory Service Identifier | 20458579045
|
ENTITY_TYPE_MEID
|
56 | A Mobile Equipment Identifier (MEID) | 35945868287319
|
ENTITY_TYPE_ACCOUNT_PROVIDER
|
57 | A source for accounts. This can be a website, business, etc. | |
ENTITY_TYPE_DEVICE_NAME
|
58 | The name of a device. This can be automatically assigned or set by a human. | John Smallberries' S21
|
ENTITY_TYPE_AIRDROP_ID
|
59 | An AirDrop ID | 8e6b4a761f3f
|
ENTITY_TYPE_BLUETOOTH_LINK_KEY
|
60 | Bluetooth Link Key | |
ENTITY_TYPE_LINKEDIN_ACCOUNT
|
61 | A LinkedIn account | john-littlejohnl-a99135237
|
ENTITY_TYPE_VIN
|
62 | A vehicle identification number (VIN) | |
ENTITY_TYPE_TELEGRAM_ACCOUNT
|
63 | A Telegram account | |
ENTITY_TYPE_APPLE_ADVERTISING_ID
|
64 | Apple advertising identifier | ED85A326-29E4-4D8C-9343-593B87A5C1EE
|
ENTITY_TYPE_INSTAGRAM_ACCOUNT
|
65 | Instagram account | |
ENTITY_TYPE_TEXT_NOW_ACCOUNT
|
66 | TextNow account | |
ENTITY_TYPE_SKYPE_ACCOUNT
|
67 | Skype account | |
ENTITY_TYPE_DEVICE_ID
|
68 | An identifier for a device | 0afc69e58bfc3a73
|
ENTITY_TYPE_GROUP
|
69 | A logical group such as a company, organization, gang, team, etc. | |
ENTITY_TYPE_CRYPT14_SALT
|
70 | The Salt used in crypt14 WhatsApp encryption | f0892622178268c7f8d94094c3bc81075f069524d7958efe02aecd4f22659e0a
|
ENTITY_TYPE_DRIVERS_LICENSE_NUMBER
|
71 | A driver's license number | |
ENTITY_TYPE_PASSPORT_NUMBER
|
72 | A passport number | |
ENTITY_TYPE_SOCIAL_SECURITY_NUMBER
|
73 | A social security number | 233-55-7808
|
ENTITY_TYPE_LICENSE_PLATE
|
74 | A vehicle license plate number | |
ENTITY_TYPE_SQLCIPHER_KEY
|
75 | A SQLCipher crypto key usually carved from memory | Dc
|
ENTITY_TYPE_WAID
|
76 | An identifier used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long. | 67f9d9554302a683f01504bce16fa9fb
|
ENTITY_TYPE_DISCORD_ACCOUNT_ID
|
77 | A Discord account identifier | |
ENTITY_TYPE_REDDIT_ACCOUNT_ID
|
78 | A Reddit account identifier | |
ENTITY_TYPE_AI_PROMPT
|
79 | An AI Prompt. Basically a user's query to Google Gemini, ChatGPT, etc. | |
ENTITY_TYPE_TINDER_ACCOUNT_ID
|
80 | A Tinder account identifier. | |
ENTITY_TYPE_UBER_ACCOUNT_ID
|
81 | An Uber account identifier. | |
ENTITY_TYPE_WAZE_ACCOUNT_ID
|
82 | A Waze account identifier. |
