Event Types
Jump to navigation
Jump to search
These are the types of events that Truxton ships with.
The values are used in the [EventTypeID] column of the [Event] table.
They are recorded in the [ID] column of the [EventType] reference table.
| Name | Value | Meaning |
|---|---|---|
EVENT_TYPE_NULL |
0 | NULL, not set |
EVENT_TYPE_UNKNOWN |
1 | Unknown |
EVENT_TYPE_MEDIA_LOADED |
2 | Media Load |
EVENT_TYPE_ADDED_BY_ANALYST |
3 | Analyst Added |
EVENT_TYPE_CALENDAR_ENTRY |
4 | Calendar Entry |
EVENT_TYPE_SMS |
5 | SMS |
EVENT_TYPE_SEARCH_TERM |
6 | Search Term |
EVENT_TYPE_MADE_A_CALL |
7 | Made a call |
EVENT_TYPE_RECEIVED_A_CALL |
8 | Received a call |
EVENT_TYPE_TOOK_A_PICTURE |
9 | Took a photo |
EVENT_TYPE_SKYPE_CHAT |
10 | Skype Chat |
EVENT_TYPE_SKYPE_CALL |
11 | Skype Call |
EVENT_TYPE_INCOMING_SKYPE_CALL |
12 | Incoming Skype Call |
EVENT_TYPE_OUTGOING_SKYPE_CALL |
13 | Outgoing Skype Call |
EVENT_TYPE_INCOMING_SMS |
14 | Incoming SMS |
EVENT_TYPE_OUTGOING_SMS |
15 | Outgoing SMS |
EVENT_TYPE_PHONE_CALL |
16 | Phone Call |
EVENT_TYPE_MISSED_PHONE_CALL |
17 | Missed Phone Call |
EVENT_TYPE_PROGRAM_EXECUTED |
18 | Program Executed |
EVENT_TYPE_OPENED_A_FILE |
19 | Opened a File |
EVENT_TYPE_YOUTUBE_VIDEO |
20 | YouTube Video |
EVENT_TYPE_FACEBOOK_LOGON |
21 | Facebook Logon |
EVENT_TYPE_AIRLINE_RESERVATION |
22 | Airline Reservation |
EVENT_TYPE_HEARD_WIFI |
23 | Heard WiFi |
EVENT_TYPE_HEARD_CELL_TOWER |
24 | Heard Cell Tower |
EVENT_TYPE_MMS |
25 | MMS |
EVENT_TYPE_INCOMING_MMS |
26 | Incoming MMS |
EVENT_TYPE_OUTGOING_MMS |
27 | Outgoing MMS |
EVENT_TYPE_TWITTER_MESSAGE |
28 | Twitter Message |
EVENT_TYPE_MISSED_A_CALL |
29 | Missed Call |
EVENT_TYPE_UNKNOWN_PHONE_CALL |
30 | Unknown Call Type |
EVENT_TYPE_VOICEMAIL |
31 | Voicemail |
EVENT_TYPE_MEDIA_ACQUIRED |
32 | Media Acquired |
EVENT_TYPE_FILE_RECYCLED |
33 | File Recycled |
EVENT_TYPE_USER_ENTERED_URL |
34 | User Typed a URL |
EVENT_TYPE_SKYPE_FILE_TRANSFER |
35 | Skype File Transfer |
EVENT_TYPE_SKYPE_VIDEO |
36 | Skype Video |
EVENT_TYPE_SKYPE_VOICEMAIL |
37 | Skype Voicemail |
EVENT_TYPE_DOMSTORE_VARIABLE_SET |
38 | DOM Variable Store |
EVENT_TYPE_BROWSER_CACHED_PASSWORD |
39 | Browser Cached Credential |
EVENT_TYPE_PASSWORD_CHANGED |
40 | Password Changed |
EVENT_TYPE_PASSWORD_CREATED |
41 | Password Created |
EVENT_TYPE_USB_SEEN_LOCAL_TIME |
42 | USB Device Seen (local time) |
EVENT_TYPE_TRACKED_A_PACKAGE |
43 | Tracked a Package |
EVENT_TYPE_APPLE_NOTE |
44 | Apple Note |
EVENT_TYPE_USB_INSERTED |
45 | USB Inserted |
EVENT_TYPE_USB_REMOVED |
46 | USB Removed |
EVENT_TYPE_FACEBOOK_MESSAGE |
47 | Facebook Message |
EVENT_TYPE_INCOMING_FACETIME |
48 | Incoming Facetime |
EVENT_TYPE_OUTGOING_FACETIME |
49 | Outgoing Facetime |
EVENT_TYPE_MISSED_FACETIME |
50 | Missed Facetime |
EVENT_TYPE_SOFTWARE_INSTALLED |
51 | Software Installed |
EVENT_TYPE_RDP_CONNECTION |
52 | Remote Desktop Connection |
EVENT_TYPE_SHUTDOWN |
53 | Shutdown |
EVENT_TYPE_FILE_DOWNLOADED |
54 | File Downloaded |
EVENT_TYPE_CONNECTED_TO_NETWORK |
55 | Connected to Network |
EVENT_TYPE_CRYPTO_KEY_CREATED |
56 | Crypto Key Created |
EVENT_TYPE_LOGON |
57 | Logon |
EVENT_TYPE_PLOT_A_ROUTE |
58 | Plot a Route |
EVENT_TYPE_LOGOFF |
59 | Logoff |
EVENT_TYPE_DISCONNECTED_FROM_NETWORK |
60 | Disconnected from Network |
EVENT_TYPE_SERVICE_INSTALLED |
61 | Service Installed |
EVENT_TYPE_POSSIBLE_INFECTION |
62 | Possible Malware Infection |
EVENT_TYPE_NETWORK_ACTIVITY |
63 | Network Activity |
EVENT_TYPE_OFFICE_ALERT |
64 | Microsoft Office Alert |
EVENT_TYPE_TIME_CHANGED |
65 | Time Changed |
EVENT_TYPE_DISK_MOUNTED |
66 | Disk was mounted (VHD, ISO, etc) |
EVENT_TYPE_DISK_DISMOUNTED |
67 | Disk was dismounted |
EVENT_TYPE_SYSTEM_BOOTED |
68 | The system was booted up |
EVENT_TYPE_GOOGLE_DUO |
69 | A Google Duo call took place |
EVENT_TYPE_BLUETOOTH_CONNECTED |
70 | A Bluetooth device was connected |
EVENT_TYPE_BLUETOOTH_DISCONNECTED |
71 | A Bluetooth device disconnected |
EVENT_TYPE_VEHICLE |
72 | Something happened in a vehicle. This is a roll-up for door opened/closed as well as other vehicle events like engine start/stop.... |
EVENT_TYPE_PLACE_VISIT |
73 | According to Google Takeout, someone visited this place. |
EVENT_TYPE_ACTIVITY_SEGMENT |
74 | According to Google Takeout, someone traveled from place to place. |
EVENT_TYPE_FINANCIAL_TRANSACTION |
75 | Money changed hands. |
EVENT_TYPE_ACCOUNT_CREATED |
76 | An account was created. |
EVENT_TYPE_LOG_CLEARED |
77 | An event log was cleared. |
EVENT_TYPE_DEVICE_LOCKED |
78 | The device entered a locked state. |
EVENT_TYPE_DEVICE_UNLOCKED |
79 | The device was unlocked. |
EVENT_TYPE_FAILED_LOGON |
80 | Someone attempted to log on and failed. |
EVENT_TYPE_MEETING |
81 | A meeting |
EVENT_TYPE_COOKIE_CREATED |
82 | A browser cookie was created |
EVENT_TYPE_COOKIE_USED |
83 | A browser cookie was used |
EVENT_TYPE_FILE_TRANSFER |
84 | A file was transferred |
EVENT_TYPE_TRUXTON_LOAD_START |
1000 | A load has begun |
EVENT_TYPE_TRUXTON_LOAD_FINISHED |
1001 | A load finished |
EVENT_TYPE_TRUXTON_LOAD |
1002 | A load was performed. This contains the start and end times |
EVENT_TYPE_TRUXTON_INVESTIGATION_NOTE |
1003 | A note was made |
EVENT_TYPE_TRUXTON_INVESTIGATION_DUE_DATE |
1004 | When the investigation should be complete |
EVENT_TYPE_TRUXTON_IMPORT |
1005 | Something was imported into Truxton. |