Media Types - Revision history

Sam at 12:30, 4 March 2026

2026-03-04T12:30:04Z

Sam at 11:17, 3 February 2024

2024-02-03T11:17:13Z

Sam at 11:16, 3 February 2024

2024-02-03T11:16:51Z

Sam at 14:08, 25 July 2022

2022-07-25T14:08:36Z

Sam at 12:47, 27 November 2021

2021-11-27T12:47:47Z

Sam at 19:40, 22 September 2020

2020-09-22T19:40:00Z

Sam at 18:52, 20 May 2020

2020-05-20T18:52:12Z

Admin: Created page with "When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the `[Med..."`


2020-05-18T20:30:44Z
Created page with "When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the <code>[Med..."
New page
When Truxton stores media, you can assign a type of media to it.

This allows the analyst to get more of a clue as to what they are looking at.

This is stored in the <code>[MediaTypeID]</code> column of the <code>[Media]</code> table in the database.

The <code>[MediaType]</code> reference table in the database also contains this information.



{| class="wikitable"

! Name

! Value

! Meaning

|-

| <code>MEDIA_TYPE_UNKNOWN</code>

| style="text-align:center;" | 0

| We don't know what type of media this is.

|-

| <code>MEDIA_TYPE_LOGICAL_FILES</code>

| style="text-align:center;" | 1

| A folder on the loader machine.

|-

| <code>MEDIA_TYPE_PHYSICAL_HARD_DISK</code>

| style="text-align:center;" | 2

| The media is a physical hard drive connected, hopefully through a write-blocker, to the loader machine processed as a bag of sectors.

|-

| <code>MEDIA_TYPE_HARD_DISK_IMAGE</code>

| style="text-align:center;" | 3

| A forensic copy of a hard disk in a file.

|-

| <code>MEDIA_TYPE_HARD_DISK_FOLDER</code>

| style="text-align:center;" | 4

| A hard drive as a folder. Mounting a hard disk image is an example. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_CD</code>

| style="text-align:center;" | 5

| A compact disc attached to the loader machine processed as a bag of sectors.

|-

| <code>MEDIA_TYPE_CD_IMAGE</code>

| style="text-align:center;" | 6

| A forensic copy of a compact disc in a file.

|-

| <code>MEDIA_TYPE_CD_FOLDER</code>

| style="text-align:center;" | 7

| A compact disc mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_DVD</code>

| style="text-align:center;" | 8

| A DVD attached to the loader machine processed as a bag of sectors.

|-

| <code>MEDIA_TYPE_DVD_IMAGE</code>

| style="text-align:center;" | 9

| A forensic copy of a DVD in a file.

|-

| <code>MEDIA_TYPE_DVD_FOLDER</code>

| style="text-align:center;" | 10

| A DVD mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_BLURAY</code>

| style="text-align:center;" | 11

| A BluRay attached to the loader machine processed as a bag of sectors.

|-

| <code>MEDIA_TYPE_BLURAY_IMAGE</code>

| style="text-align:center;" | 12

| A forensic copy of a BluRay disc in a file.

|-

| <code>MEDIA_TYPE_BLURAY_FOLDER</code>

| style="text-align:center;" | 13

| A folder on a BluRay physically attached to the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_THUMB_DRIVE</code>

| style="text-align:center;" | 14

| A thumb drive attached to the loader machine processed as a bag of sectors.

|-

| <code>MEDIA_TYPE_THUMB_DRIVE_IMAGE</code>

| style="text-align:center;" | 15

| A forensic copy of a thumb drive in a file.

|-

| <code>MEDIA_TYPE_THUMB_DRIVE_FOLDER</code>

| style="text-align:center;" | 16

| A thumb drive mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_SIM_CARD</code>

| style="text-align:center;" | 17

| A SIM card attached to the loader machine.

|-

| <code>MEDIA_TYPE_SIM_CARD_IMAGE</code>

| style="text-align:center;" | 18

| A forensic copy of a SIM card in a file.

|-

| <code>MEDIA_TYPE_SIM_CARD_FOLDER</code>

| style="text-align:center;" | 19

| A SIM card mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_PHYSICAL_SD_CARD</code>

| style="text-align:center;" | 20

| An SD card attached to the loader machine.

|-

| <code>MEDIA_TYPE_SD_CARD_IMAGE</code>

| style="text-align:center;" | 21

| A forensic copy of an SD card in a file.

|-

| <code>MEDIA_TYPE_SD_CARD_FOLDER</code>

| style="text-align:center;" | 22

| An SD card mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.

|-

| <code>MEDIA_TYPE_RAM</code>

| style="text-align:center;" | 23

| A dump of memory.

|-

| <code>MEDIA_TYPE_FLOPPY_DISK_IMAGE</code>

| style="text-align:center;" | 24

| A forensic copy of a [https://en.wikipedia.org/wiki/Floppy_disk floppy diskette].

|-

| <code>MEDIA_TYPE_FLASH</code>

| style="text-align:center;" | 25

| A dump of flash memory chips.

|-

| <code>MEDIA_TYPE_GPS</code>

| style="text-align:center;" | 26

| A dump of a GPS device.

|-

| <code>MEDIA_TYPE_TAR</code>

| style="text-align:center;" | 27

| A [https://en.wikipedia.org/wiki/Tar_(computing) TAR] file.

|-

| <code>MEDIA_TYPE_RAR</code>

| style="text-align:center;" | 28

| A [https://en.wikipedia.org/wiki/RAR_(file_format) RAR] file.

|-

| <code>MEDIA_TYPE_ZIP</code>

| style="text-align:center;" | 29

| A [https://en.wikipedia.org/wiki/Zip_(file_format) ZIP] file.

|-

| <code>MEDIA_TYPE_FORENSIC_DATA</code>

| style="text-align:center;" | 30

| Data pulled from evidence by forensic technicians.

|-

| <code>MEDIA_TYPE_ASSOCIATED_DATA</code>

| style="text-align:center;" | 31

| Data relevant to the case but doesn't come from seized media such as photos of the media, crime scene, etc.

|-

| <code>MEDIA_TYPE_PHONE</code>

| style="text-align:center;" | 32

| A dump of a phone.

|-

| <code>MEDIA_TYPE_TABLET</code>

| style="text-align:center;" | 33

| A dump of a tablet.

|-

| <code>MEDIA_TYPE_PHYSICAL_ITEMS</code>

| style="text-align:center;" | 34

| Non-digital evidence collected from the crime scene such as pieces of paper, writing on a wall, etc.

|-

| <code>MEDIA_TYPE_ABORT_LOAD</code>

| style="text-align:center;" | 32749

| A request has been made to abort any loading of this media.

|}

@@ Line 157: / Line 157: @@
 | style="text-align:center;" | 36
 | This media contains data extracted from a vehicle.
 |-
 | <code>MEDIA_TYPE_ABORT_LOAD</code>

@@ Line 2: / Line 2: @@
 This allows the analyst to get more of a clue as to what they are looking at.
 This is stored in the <code>[MediaTypeID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table in the database.
 This information is also kept in the <code>[MediaType]</code> database table.

@@ Line 154: / Line 154: @@
 | style="text-align:center;" | 35
 | This media contains files curated by an analyst to correlate with seized media.
 |-
 | <code>MEDIA_TYPE_ABORT_LOAD</code>

@@ Line 4: / Line 4: @@
 The <code>[MediaType]</code> reference table in the database also contains this information.
-This information is also kept in the <code>MediaType</code> database table.
+This information is also kept in the <code>[MediaType]</code> database table.
 {| class="wikitable"

Media Types - Revision history

Sam at 12:30, 4 March 2026

Sam at 11:17, 3 February 2024

Sam at 11:16, 3 February 2024

Sam at 14:08, 25 July 2022

Sam at 12:47, 27 November 2021

Sam at 19:40, 22 September 2020

Sam at 18:52, 20 May 2020

Admin: Created page with "When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the [Med..."

Admin: Created page with "When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the `[Med..."`