Easy Button Load - Revision history

Sam at 11:34, 18 July 2025

2025-07-18T11:34:03Z

Sam: /* Sample Scenario */

2024-01-24T15:45:40Z

Sample Scenario

Sam: /* Sample Scenario */

2024-01-24T15:44:04Z

Sample Scenario

Sam at 10:29, 8 June 2023

2023-06-08T10:29:21Z

Sam at 21:30, 26 October 2022

2022-10-26T21:30:26Z

Sam: /* Everything */

2022-10-26T08:57:33Z

Everything

Sam: /* Everything */

2022-10-26T08:57:00Z

Everything

Sam: /* PC1 */

2022-10-26T08:55:16Z

PC1

Sam: /* Sample Scenario */

2022-07-15T12:50:33Z

Sample Scenario

Sam: /* Determining What to Load */

2022-07-15T12:45:49Z

Determining What to Load

@@ Line 1: / Line 1: @@
 An Easy Button Load is a way to have Truxton perform processing on an external drive.
 Everything that Truxton does is put on that drive.
 =When to Use Easy Button=

@@ Line 117: / Line 117: @@
 * In Windows File Explorer, navigate to the <code>E:\</code> folder
 * Right-button on the <code>Case 2022-42</code> folder and choose "Easy Button Load into Truxton"
-* Wait for Truxton to complete
+* Wait for Truxton to complete. Have a coffee, chat about an [https://www.imdb.com/title/tt23289160 amazing movie] with friends.
 * A browser should appear with the "Case 2022-42" home page in it

@@ Line 116: / Line 116: @@
 * Create a folder for the DVD and put the ISO into it, <code>E:\Case 2022-42\DVD\DVD001.ISO</code>
 * In Windows File Explorer, navigate to the <code>E:\</code> folder
-* Right-button on the <code>Case 2022-42</code> and choose "Easy Button Load into Truxton"
+* Right-button on the <code>Case 2022-42</code> folder and choose "Easy Button Load into Truxton"
 * Wait for Truxton to complete
 * A browser should appear with the "Case 2022-42" home page in it

@@ Line 5: / Line 5: @@
 The Easy Button loads (normal and triage) are used when you have collected seized media to an external drive and you quickly just want reports from it.
 You're not interested in looking at images or videos, you just want text reports and Excel spreadsheets.
 =Operating Scenario=

@@ Line 1: / Line 1: @@
 An Easy Button Load is a way to have Truxton perform processing on an external drive.
 Everything that Truxton does is put on that drive.
 =Operating Scenario=

@@ Line 50: / Line 50: @@
 * <code>Geographic Information.kmz</code> - This contains all of the geographic coordinates from the media in the investigation in [https://developers.google.com/kml/documentation/kmzarchives?hl=en KMZ] format for use by applications such as [https://earth.google.com/web/ Google Earth.]
 * <code>Investigation Summary.zip</code> - This contains the Investigation Summary HTML report and supporting files
-* <code>Investigation.tpif</code> - The database records for all media in the investigation. This is used to import this investigation into someone else's Truxton.
+* <code>Investigation.tpif</code> - The database records for all media in the investigation. This is used to import this investigation into someone else's Truxton. File contents are not included in this file.
 * <code>Unique Artifacts.xlsx</code> - An Excel spreadsheet containing all of the unique artifacts from the media

@@ Line 45: / Line 45: @@
 This folder (<code>"D:\Truxton Results\Collection 1\Reports\Everything"</code>) contains:
 * <code>Contacts.zip</code> - This contains the Consolidated Contacts HTML report for the investigation with supporting files
 * <code>Geographic Information.geojson</code> - This contains all of the geographic coordinates from the media in the investigation in [https://datatracker.ietf.org/doc/html/rfc7946 GeoJSON] format for use by system such as [https://4dvanalytics.com/ 4DV.]
 * <code>Geographic Information.kmz</code> - This contains all of the geographic coordinates from the media in the investigation in [https://developers.google.com/kml/documentation/kmzarchives?hl=en KMZ] format for use by applications such as [https://earth.google.com/web/ Google Earth.]

@@ Line 56: / Line 56: @@
 * <code>Geographic Information.geojson</code> - This contains all of the geographic coordinates from this media in [https://datatracker.ietf.org/doc/html/rfc7946 GeoJSON] format for use by system such as [https://4dvanalytics.com/ 4DV.]
 * <code>Geographic Information.kmz</code> - This contains all of the geographic coordinates from this media in [https://developers.google.com/kml/documentation/kmzarchives?hl=en KMZ] format for use by applications such as [https://earth.google.com/web/ Google Earth.]
-* <code>Investigation Summary.zip</code> - This contains the Media Summary HTML report and supporting files
+* <code>Summary.zip</code> - This contains the Media Summary HTML report and supporting files
 * <code>Unique Artifacts.xlsx</code> - An Excel spreadsheet containing all of the unique artifacts from this media

@@ Line 104: / Line 104: @@
 You have seized two phones, a hard drive, thumb drive and DVD from a person of interest.
 * Attach an external drive to your imaging computer (drive <code>E:</code> for sample purposes)
-* Create a top level folder, <code>E:\Collections</code>
+* Create a top level folder, <code>E:\Case 2022-42</code>
-* Create a folder to hold the seized media, <code>E:\Collections\Case 2022-42</code>
+* Create a folder for the first phone and put the UFDR into it, <code>E:\Case 2022-42\Phone 1\iPhone 1.ufdr</code>
-* Create a folder for the first phone and put the UFDR into it, <code>E:\Collections\Case 2022-42\Phone 1\iPhone 1.ufdr</code>
+* Create a folder for the second phone and put the UFDR into it, <code>E:\Case 2022-42\Phone 2\Android 1.ufdr</code>
-* Create a folder for the second phone and put the UFDR into it, <code>E:\Collections\Case 2022-42\Phone 2\Android 1.ufdr</code>
+* Create a folder for the hard drive and put the E01 into it, <code>E:\Case 2022-42\Hard Drive 1\HD001.E01</code>
-* Create a folder for the hard drive and put the E01 into it, <code>E:\Collections\Case 2022-42\Hard Drive 1\HD001.E01</code>
+* Create a folder for the DVD and put the ISO into it, <code>E:\Case 2022-42\DVD\DVD001.ISO</code>
-* Create a folder for the DVD and put the ISO into it, <code>E:\Collections\Case 2022-42\DVD\DVD001.ISO</code>
+* In Windows File Explorer, navigate to the <code>E:\</code> folder
 * Right-button on the <code>Case 2022-42</code> and choose "Easy Button Load into Truxton"
 * Wait for Truxton to complete
 * A browser should appear with the "Case 2022-42" home page in it

@@ Line 68: / Line 68: @@
 Once the load list has been created, the loader is spawned to process it.
-==XRY Files==
+==Backup.zip==
-When Easy Button finds a file that has an extension of <code>".xry"</code> it will the folder contains an [https://www.msab.com/product/xry-extract/ XRY] extract.
+Any file named <code>"Backup.zip"</code> is assumed to be an [https://www.adfsolutions.com/ ADF] dump and will be loaded.
-It will then look for folders in the same folder as the <code>".xry"</code> file.
-If the folder contains a <code>".log"</code> file, that folder will be loaded.
+==DD Files==
 ==E01 Files==
 Any [[Type_Expert_Witness_Data|Expert Witness]] files will be loaded.
 ==IMG Files==
 Any file name with an extension of <code>".img"</code> will be loaded.
 ==ISO Files==
 Any file name with an extension of <code>".iso"</code> will be loaded as a [[Type_ISO_Disk_Image|ISO Disk Image]] file.
 ==Report.xml==
@@ Line 94: / Line 92: @@
 ==UFDR Files==
 [https://cellebrite.com/en/cellebrite-reader-the-first-stop-for-digital-intelligence-collaboration/ UFDR] files are UFED Reader files.
 ==Zip Files==