Truxton remove triage file

This allows you to remove a file or folder from a Triage load. This will delete a record from the [TriageFile] table.

Syntax

uint64_t truxton_remove_triage_file(uint64_t truxton_handle, int64_t type, char const * name);

Parameters

truxton_handle

The handle created by the truxton_create call.

type

This tells Truxton what the meaning of the name parameter is. It can be one of the following values:

Value	Meaning
1	The name is the name of a file
2	The name is the name of a folder
5	The name is regular expression pattern for a file
6	The name is regular expression pattern for a folder

name

The name of the file or folder to include in a Triage load. This can be a regular expression.

Sample

void remove_useless_files( uint64_t truxton_handle )
{
   truxton_remove_triage_file( truxton, 2, "MySecrets" ); // Turned out to be a Victoria's Secret image cache
}