ExpandedFile Table

The [ExpandedFile] table is used to record which exploitation methods were performed on a file. Truxton tracks which version of ETLs were used to expand/exploit a file. This allows you to make intelligent decisions about reprocessing files with a newer version of an existing ETL.

SQL

CREATE TABLE "ExpandedFile"
(
  "FileID" uuid NOT NULL,
  "HashID" uuid NOT NULL,
  "Expander" bigint DEFAULT 0 NOT NULL,
  "Version" bigint DEFAULT 0 NOT NULL
);

Columns

FileID

The globally unique identifier of the file that was expanded. This corresponds to the ID column of the [File] table.

HashID

The hash of the files contents. This corresponds to the HashID column of the [File] table.

Expander

The identifier of the expander that processed this file. Usually the string identifier of the queue name.

Version

The version of the expanded that expanded this file.