Truxton URL Interface - Revision history

Sam at 09:52, 11 December 2025

2025-12-11T09:52:40Z

Sam at 09:40, 11 December 2025

2025-12-11T09:40:14Z

Sam: /* Sample */

2025-12-11T09:32:15Z

Sample

Sam at 09:30, 11 December 2025

2025-12-11T09:30:41Z

Sam: /* Parameters */

2024-02-03T12:37:53Z

Parameters

Sam at 18:53, 22 October 2021

2021-10-22T18:53:30Z

Sam: Created page with "Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific..."

2020-12-14T13:39:49Z

Created page with "Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific..."

New page

Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines.
This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.

=Artifact=
You can link directly to a specific artifact in Truxton.

==Syntax==
<pre>
truxton://artifact/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.

=Camera=
You can link directly to a specific camera information view in Truxton.

==Syntax==
<pre>
truxton://camera/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.

=Event=
You can link directly to a specific event view in Truxton.

==Syntax==
<pre>
truxton://event/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.

=File=
You can link directly to a specific file view in Truxton.

==Syntax==
<pre>
truxton://file/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.

=Hash=
You can link directly to a specific file view in Truxton.

==Syntax==
<pre>
truxton://hash/{GUID}
</pre>

==Parameters==
===<code>hash</code>===
An MD5 or SHA1 hash.

=Investigation=
You can link directly to a specific investigation view in Truxton.

==Syntax==
<pre>
truxton://investigation/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.

=Location=
You can link directly to a specific location view in Truxton.

==Syntax==
<pre>
truxton://location/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.

=md5=
You can link directly to a specific file view in Truxton.

==Syntax==
<pre>
truxton://md5/{hash}
</pre>

==Parameters==
===<code>hash</code>===
An MD5 hash.

=Media=
You can link directly to a specific investigation view in Truxton.

==Syntax==
<pre>
truxton://media/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
This corresponds to the <code>[ID]</code> column of the <code>[Media]</code> table.

=Message=
You can link directly to a specific investigation view in Truxton.

==Syntax==
<pre>
truxton://message/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.

=sha1=
You can link directly to a specific investigation view in Truxton.

==Syntax==
<pre>
truxton://sha1/{hash}
</pre>

==Parameters==
===<code>hash</code>===
The SHA1 hash value

=tutorial=
Re-display the initial desktop tutorial

==Syntax==
<pre>
truxton://tutorial
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.

=Website=
You can link directly to a specific website visitview in Truxton.

==Syntax==
<pre>
truxton://website/{GUID}
</pre>

==Parameters==
===<code>GUID</code>===
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.

@@ Line 16: / Line 16: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.
 </source>
@@ Line 34: / Line 34: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.
 </source>
@@ Line 52: / Line 52: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
 </source>
@@ Line 70: / Line 70: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.
 </source>
@@ Line 87: / Line 87: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 </source>
@@ Line 105: / Line 105: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.
 </source>
@@ Line 123: / Line 123: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.
 </source>
@@ Line 140: / Line 140: @@
 ==Sample==
-<source lang="HTML" highlight="5">
+<source lang="HTML">
 Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 </source>
 =Media=
-You can link directly to a specific investigation view in Truxton.
+You can link directly to a specific media view in Truxton.
 ==Syntax==
 <pre>
 truxton://media/{GUID}
 </pre>
@@ Line 156: / Line 156: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table.
 =Message=
-You can link directly to a specific investigation view in Truxton.
+You can link directly to a specific message view in Truxton.
 ==Syntax==
 <pre>
 truxton://message/{GUID}
 </pre>
@@ Line 169: / Line 174: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.
 =sha1=
-You can link directly to a specific investigation view in Truxton.
+You can link directly to a specific hash view in Truxton.
 ==Syntax==
 <pre>
 truxton://sha1/{hash}
 </pre>
@@ Line 181: / Line 191: @@
 ===<code>hash</code>===
 The SHA1 hash value
 =tutorial=
@@ Line 190: / Line 205: @@
 </pre>
-==Parameters==
+==Sample==
-===<code>GUID</code>===
+<source lang="HTML">
-The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+Click <a href="truxton://tutorial">here</a> to run the Truxton tutorial.
 =Website=
@@ Line 199: / Line 215: @@
 ==Syntax==
 <pre>
 truxton://website/{GUID}
 </pre>
 ==Parameters==
 ===<code>GUID</code>===
-The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the website.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.

@@ Line 71: / Line 71: @@
 ==Sample==
 <source lang="HTML" highlight="5">
-Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
+Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.
 </source>
 =Hash=

@@ Line 48: / Line 48: @@
 ==Parameters==
 ===<code>GUID</code>===
-The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the event.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
@@ Line 66: / Line 66: @@
 ==Parameters==
 ===<code>GUID</code>===
-The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the file.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
@@ Line 75: / Line 75: @@
 =Hash=
-You can link directly to a specific file view in Truxton.
+You can link directly to a specific hash view in Truxton.
 ==Syntax==
 <pre>
 truxton://hash/{GUID}
 </pre>
@@ Line 85: / Line 85: @@
 ===<code>hash</code>===
 An MD5 or SHA1 hash.
 =Investigation=
-You can link directly to a specific investigation view in Truxton.
+You can link directly to a specific investigation in Truxton.
 ==Syntax==
 <pre>
 truxton://investigation/{GUID}
 </pre>
 ==Parameters==
 ===<code>GUID</code>===
-The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the investigation.
 This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.
 =Location=
@@ Line 111: / Line 121: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.
 =md5=
-You can link directly to a specific file view in Truxton.
+You can link directly to a specific hash view in Truxton.
 ==Syntax==
@@ Line 123: / Line 138: @@
 ===<code>hash</code>===
 An MD5 hash.
 =Media=

@@ Line 14: / Line 14: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.
 =Camera=
@@ Line 27: / Line 32: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.
 =Event=
@@ Line 40: / Line 50: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 =File=
@@ Line 53: / Line 68: @@
 The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 =Hash=

@@ Line 1: / Line 1: @@
-Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines.
+Truxton installs a protocol handler for the "truxton:" protocol on Windows machines.
 This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.
@@ Line 155: / Line 155: @@
 =Website=
-You can link directly to a specific website visitview in Truxton.
+You can link directly to a specific website visit view in Truxton.
 ==Syntax==