truxwiki.com - Recent changes [en]

Next Release

Sam — Sat, 25 Jul 2026 07:56:10 GMT

Improvements

Type Android Resource ID Mapping

Sam — Thu, 16 Jul 2026 21:02:44 GMT

Type KML Folder Snippet

Sam — Thu, 16 Jul 2026 21:02:15 GMT

Type Android Resource ID Mapping

Sam — Thu, 16 Jul 2026 21:02:05 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Android_Resource_ID..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_CloudKit_Reference_Data|<<]] Details [[Type_KML_Folder_Snippet|>>]]
| Defined Constant
| <code>Type_Android_Resource_ID_Mapping</code>
|-
| File Type Value
| 1293
|-
| Parent Type
| None
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| Yes
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

Android ID Map

=Description=
Android Resource ID Mapping

=Details=
* [https://github.com/omnirom/android_frameworks_base_old/blob/5e4b775b8f5a75d9a1d2d674acf9f2fa39dae125/libs/androidfw/ResourceTypes.cpp#L287 Github]

Type Prebuilt Set

Sam — Thu, 16 Jul 2026 20:59:41 GMT

Type CloudKit Reference Data

Sam — Thu, 16 Jul 2026 20:59:29 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_CloudKit_Reference_Da..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Prebuilt_Set|<<]] Details [[Type_Android_Resource_ID_Mapping|>>]]
| Defined Constant
| <code>Type_CloudKit_Reference_Data</code>
|-
| File Type Value
| 1292
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

CloudKit Reference

=Description=
CloudKit Reference Data

Type Prebuilt Set

Sam — Thu, 16 Jul 2026 20:57:37 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Prebuilt_Set</code..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Suggestion_Entities|<<]] Details [[Type_CloudKit_Reference_Data|>>]]
| Defined Constant
| <code>Type_Prebuilt_Set</code>
|-
| File Type Value
| 1291
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>dyld4</code>
|}

Prebuilt Set

=Description=
Apple Dynamic Prebuilt Set

File Types Supported

Sam — Thu, 16 Jul 2026 20:55:15 GMT

File Types

Next Release

Sam — Thu, 16 Jul 2026 10:55:41 GMT

Entity Types

Type KML Folder Snippet

Sam — Sat, 11 Jul 2026 14:32:49 GMT

Type Suggestion Entities

Sam — Sat, 11 Jul 2026 14:32:34 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Suggestion_Entities</..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_TikTok_Search_History|<<]] Details [[Type_KML_Folder_Snippet|>>]]
| Defined Constant
| <code>Type_Suggestion_Entities</code>
|-
| File Type Value
| 1290
|-
| Parent Type
| [[Type_SQLite_Database|SQLite]]
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/vnd.sqlite3</code>
|-
| Filename Extension
| <code>db</code>
|}

Suggestion Entities

=Description=
Apple Suggestion Entities

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Entity Types|ENTITY_TYPE_EMAIL_ADDRESS]]
* [[Entity Types|ENTITY_TYPE_PERSON]]
* [[Entity Types|ENTITY_TYPE_PHONE_NUMBER]]
* [[Type_File_Details]]
* [[Type_SQLite_Sample]]

=Filenames Seen=
* <code>entities.db</code>

FileType Template

Sam — Sat, 11 Jul 2026 14:27:08 GMT

Type TikTok Search History

Sam — Sat, 11 Jul 2026 14:24:06 GMT

Type TikTok Search History

Sam — Sat, 11 Jul 2026 14:23:50 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_TikTok_Search_Hi..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Apple_Wallet_Transactions|<<]] Details [[Type_Suggestion_Entities|>>]]
| Defined Constant
| <code>Type_TikTok_Search_History</code>
|-
| File Type Value
| 1289
|-
| Parent Type
| [[Type_XML_PList|XML Plist]]
| None
|-
| Carve
| Yes
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>text/xml</code>
|-
| Filename Extension
| <code></code>
|}

TikTok Searches

=Description=
TikTok Search History

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Entity Types|ENTITY_TYPE_SEARCH_TERM]]
* [[Event Types|EVENT_TYPE_SEARCH_TERM]]

FileType Template

Sam — Sat, 11 Jul 2026 14:20:27 GMT

Type Apple Wallet Transactions

Sam — Sat, 11 Jul 2026 14:19:37 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Apple_Wallet_Transaction..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_TikTok_Database|<<]] Details [[Type_TikTok_Search_History|>>]]
| Defined Constant
| <code>Type_Apple_Wallet_Transactions</code>
|-
| File Type Value
| 1288
|-
| Parent Type
| [[Type_SQLite_Database|SQLite]]
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/vnd.sqlite3</code>
|-
| Filename Extension
| <code>sqlite</code>
|}

Wallet Transactions

=Description=
Apple Wallet Transactions Database

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Type_File_Details]]
* [[Type_SQLite_Sample]]

=Filenames Seen=
* <code>passes23.sqlite</code>

Type TikTok Database

Sam — Sat, 11 Jul 2026 14:17:07 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_TikTok_Database</co..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Photo_Adjustment|<<]] Details [[Type_Apple_Wallet_Transactions|>>]]
| Defined Constant
| <code>Type_TikTok_Database</code>
|-
| File Type Value
| 1287
|-
| Parent Type
| [[Type_SQLite_Database|SQLite]]
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/vnd.sqlite3</code>
|-
| Filename Extension
| <code>db</code>
|}

TikTok

=Description=
TikTok Database

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]
* [[Thumbnail]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Entity Types|ENTITY_TYPE_PERSON]]
* [[Entity Types|ENTITY_TYPE_TIKTOK_ACCOUNT_ID]]
* [[Type_File_Details]]
* [[Type_SQLite_Sample]]

=Filenames Seen=
* <code>AwemeIM.db</code>

Type Photo Adjustment

Sam — Sat, 11 Jul 2026 14:14:02 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Photo_Adjustment</code>..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_State_Repository_Data|<<]] Details [[Type_TikTok_Database|>>]]
| Defined Constant
| <code>Type_Photo_Adjustment</code>
|-
| File Type Value
| 1286
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

Photo Adjustment

=Description=
Apple Photo Mutation Adjustment

Type State Repository Data

Sam — Sat, 11 Jul 2026 14:11:52 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_State_Repository_Data</code> |- | File T..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_ACMI|<<]] Details [[Type_Photo_Adjustment|>>]]
| Defined Constant
| <code>Type_State_Repository_Data</code>
|-
| File Type Value
| 1285
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>srd</code>
|}

State Repository Data

=Description=
Microsoft Application State Repository Data

Type ACMI

Sam — Sat, 11 Jul 2026 14:10:07 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_ACMI</code> |- | File Type Value |..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_GGUF|<<]] Details [[Type_State_Repository_Data|>>]]
| Defined Constant
| <code>Type_ACMI</code>
|-
| File Type Value
| 1284
|-
| Parent Type
| [[Type_ASCII_Text|ASCII]]
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>text/plain</code>
|-
| Filename Extension
| <code>acmi</code>
|}

ACMI

=Description=
Tacview Air Combat Maneuvering Instrumentation

=Details=
* [https://raia-software-inc.gitbook.io/tacview/technical-documentation/acmi-telemetry-file-format Tacview]

Type GGUF

Sam — Sat, 11 Jul 2026 14:05:52 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_GGUF</code> |- | File Type Value..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Google_DocList_Database|<<]] Details [[Type_ACMI|>>]]
| Defined Constant
| <code>Type_GGUF</code>
|-
| File Type Value
| 1283
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>gguf</code>
|}

GGUF

=Description=
GPT-Generated Unified Format

=Details=
* [https://github.com/ggml-org/llama.cpp/blob/185cbff6f1b460e2ac193fbe7c55dd6c17ff0b1b/ggml/src/gguf.cpp#L418 llama.cpp]

Type Google DocList Database

Sam — Sat, 11 Jul 2026 14:01:46 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Google_DocList_Database</code> |-..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Verizon_Messages_Config|<<]] Details [[Type_GGUF|>>]]
| Defined Constant
| <code>Type_Google_DocList_Database</code>
|-
| File Type Value
| 1282
|-
| Parent Type
| [[Type_SQLite_Database|SQLite]]
|-
| Carve
| Yes
|-
| Format Details
| Yes
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/vnd.sqlite3</code>
|-
| Filename Extension
| <code>db</code>
|}

DocList

=Description=
Google DocList Database

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Type_File_Details]]
* [[Type_SQLite_Sample]]

=Filenames Seen=
* <code>DocList.db</code>

Type Verizon Messages Config

Sam — Sat, 11 Jul 2026 13:58:45 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Verizon_Messages_C..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_OpenGL_Shader_Cache|<<]] Details [[Type_Google_DocList_Database|>>]]
| Defined Constant
| <code>Type_Verizon_Messages_Config</code>
|-
| File Type Value
| 1281
|-
| Parent Type
| [[Type_JSON|JSON]]
|-
| Carve
| Yes
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>text/json</code>
|-
| Filename Extension
| <code></code>
|}

Verizon Messages Config

=Description=
Verizon Messages Configuration

=Truxton Exploiters=
This file type is handled by the following ETLs:
* [[Expand]]

=Items Produced=
Truxton will extract the following from this file type:
* [[Entity Types|ENTITY_TYPE_GOOGLE_ANALYTICS_ID]]

=Filenames Seen=
* <code>configuration</code>

Type OpenGL Shader Cache

Sam — Sat, 11 Jul 2026 13:56:07 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_OpenGL_Shader_Cache..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Apple_Object_Model|<<]] Details [[Type_Verizon_Messages_Config|>>]]
| Defined Constant
| <code>Type_OpenGL_Shader_Cache</code>
|-
| File Type Value
| 1280
|-
| Parent Type
| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

OpenGL Shader Cache

=Description=
OpenGL Shader Cache

Type Apple Object Model

Sam — Sat, 11 Jul 2026 13:54:00 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Apple_Object_Model</co..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Apple_Multi_Archive|<<]] Details [[Type_OpenGL_Shader_Cache|>>]]
| Defined Constant
| <code>Type_Apple_Object_Model</code>
|-
| File Type Value
| 1279
|-
| Parent Type
|| None
|-
| Carve
| No
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code>omo</code>
|}

Apple Object Model

=Description=
Apple Core Object Model

Type Apple Multi Archive

Sam — Sat, 11 Jul 2026 13:51:44 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Apple_Multi_Archive</c..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Apple_Code_Directory|<<]] Details [[Type_Apple_Object_Model|>>]]
| Defined Constant
| <code>Type_Apple_Multi_Archive</code>
|-
| File Type Value
| 1278
|-
| Parent Type
| None
|-
| Carve
| Yes
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

Multi Archive

=Description=
Apple Multi Archive

Type Core Animation Markup Language

Sam — Sat, 11 Jul 2026 13:48:51 GMT

Type Apple Code Directory

Sam — Sat, 11 Jul 2026 13:48:45 GMT

Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_Apple_Code_..."

New page

{| style="float:right;border:1px solid black"
|+ [[Type_Core_Animation_Markup_Language|<<]] Details [[Type_Apple_Multi_Archive|>>]]
| Defined Constant
| <code>Type_Apple_Code_Directory</code>
|-
| File Type Value
| 1277
|-
| Parent Type
| None
|-
| Carve
| Yes
|-
| Format Details
| No
|-
| Carve Meta Data
| No
|-
| MIME Type
| <code>application/octet-stream</code>
|-
| Filename Extension
| <code></code>
|}

Code Directory

=Description=
Apple Code Directory

=Details=
* [https://github.com/apple-oss-distributions/xnu/blob/e3723e1f17661b24996789d8afc084c0c3303b26/osfmk/kern/cs_blobs.h#L213 Xnu]

Type User Registry

Sam — Sat, 11 Jul 2026 11:47:26 GMT

Items Produced

File Types Supported

Sam — Sat, 11 Jul 2026 11:40:53 GMT

File Types

Type User Registry

Sam — Sat, 11 Jul 2026 11:37:31 GMT

Entity Types

Sam — Sat, 11 Jul 2026 11:33:15 GMT

Type EBTS

Sam — Mon, 06 Jul 2026 11:32:32 GMT

Details

@@ Line 6: / Line 6: @@
 ==Improvements==
 * Use PostgreSQL 18.4
-* Updated to SQLite 3.53.3
+* Updated to SQLite 3.53.4
 * Updated default hashset to <code>Truxton20251201.hashset</code> with 251,384,600 hashes.
 * New <code>globaldedupe</code> [[Default ETL Options|option]] causes only unique files to be stored in depots. Loads will slow but file contents will not be duplicated anywhere. You save storage at the cost of load speed.

@@ Line 1: / Line 1: @@
 {| style="float:right;border:1px solid black"
-|+ [[Type_Suggestion_Entities|<<]] Details [[Type_Possible_Geographic_Coordinates|>>]]
+|+ [[Type_Android_Resource_ID_Mapping|<<]] Details [[Type_Possible_Geographic_Coordinates|>>]]
 | Defined Constant
 | <code>Type_KML_Folder_Snippet</code>

@@ Line 3,469: / Line 3,469: @@
 | [[Type_Suggestion_Entities]]
 | style="text-align:center;" | 1290
 |-
 | [[Type_KML_Folder_Snippet]]

@@ Line 5: / Line 5: @@
 ==Improvements==
-* Use PostgreSQL 18.1
+* Use PostgreSQL 18.4
-* Updated to SQLite 3.51.1
+* Updated to SQLite 3.53.3
 * Updated default hashset to <code>Truxton20251201.hashset</code> with 251,384,600 hashes.
 * New <code>globaldedupe</code> [[Default ETL Options|option]] causes only unique files to be stored in depots. Loads will slow but file contents will not be duplicated anywhere. You save storage at the cost of load speed.
@@ Line 112: / Line 112: @@
 # [[Type_GGUF]] - GPT-Generated Unified Format
 # [[Type_ACMI]] - Tacview Air Combat Maneuvering Instrumentation
 ===Entity Types===
 # [[Entity Types|ENTITY_TYPE_BITCOIN]] - A bitcoin account
 # [[Entity Types|ENTITY_TYPE_BITCOIN_SEED]] - A bitcoin seed phrase
 ===Event Types===

@@ Line 1: / Line 1: @@
 {| style="float:right;border:1px solid black"
-|+ [[Type_Core_Animation_Markup_Language|<<]] Details [[Type_Possible_Geographic_Coordinates|>>]]
+|+ [[Type_Suggestion_Entities|<<]] Details [[Type_Possible_Geographic_Coordinates|>>]]
 | Defined Constant
 | <code>Type_KML_Folder_Snippet</code>

@@ Line 11: / Line 11: @@
 |-
 | Carve
-| Yes
+| No
 |-
 | Format Details
-| Yes
+| No
 |-
 | Carve Meta Data
-| Yes
+| No
 |-
 | MIME Type

@@ Line 8: / Line 8: @@
 |-
 | Parent Type
-| [[Type_JPEG|JPEG]]
+| [[Type_SQLite_Database|SQLite]]
 | None
 |-
@@ Line 46: / Line 46: @@
 * [[URL Types|URL_TYPE_XXX]]
 * [[Type_Camera_Information]]
 * [[Type_SQLite_Sample]]
 * [[Type_Location]]

@@ Line 9: / Line 9: @@
 | Parent Type
 | [[Type_XML_PList|XML Plist]]
 |-
 | Carve

@@ Line 44: / Line 44: @@
 * <code>[[Entity Types|ENTITY_TYPE_MUID]]</code>
 * <code>[[Entity Types|ENTITY_TYPE_PUID]]</code>
 * <code>[[Type_File_Details]]</code>

@@ Line 3,460: / Line 3,460: @@
 | [[Type_TikTok_Database]]
 | style="text-align:center;" | 1287
 |-
 | [[Type_KML_Folder_Snippet]]

@@ Line 39: / Line 39: @@
 =Items Produced=
 Truxton will extract the following from this file type:
 * <code>[[Type_File_Details]]</code>

@@ Line 398: / Line 398: @@
 | style="text-align:center;" | 85
 | A Google analytics ID.
-| UA-39296006-23
+| <code>UA-39296006-23</code>
 |-
 | <code>ENTITY_TYPE_TIKTOK_ACCOUNT_ID</code>
 | style="text-align:center;" | 86
 | A TikTok account ID.
-| 7573833892051993644
+| <code>7573833892051993644</code>
 |}

@@ Line 20: / Line 20: @@
 |-
 | Filename Extension
-| <code>an2</code><br><code>ebts</code>
+| <code>an2</code><br><code>ebts<br>eft</code>
 |}
@@ Line 29: / Line 29: @@
 =Details=
-* [https://fbibiospecs.fbi.gov/file-repository/ebts/master-ebts-v11-0.pdf FBI]
+* [https://fbibiospecs.fbi.gov/file-repository/ebts/master-ebts-v11-0.pdf FBI EBTS Version 11.0 242-HQ-A6687913-SYSDOCU]