Truxton create investigation hashset - Revision history

Sam: /* investigation_id */

2021-06-02T08:46:36Z

investigation_id

Sam: /* Sample */

2021-06-01T15:42:13Z

Sample

Sam: Created page with "This will create a hash set file of every unique hash in an investigation. =Syntax= void truxton_create_investigation_hashset( uint64_t truxton..."

2021-06-01T15:36:05Z

Created page with "This will create a hash set file of every unique hash in an investigation. =Syntax= <source lang="C"> void truxton_create_investigation_hashset( uint64_t truxton..."

New page

This will create a [[Hash Set|hash set]] file of every unique hash in an investigation.

=Syntax=
<source lang="C">
void truxton_create_investigation_hashset( uint64_t truxton_handle, char const * investigation_id, char const * filename );
</source>

=Parameters=
==<code>truxton_handle</code>==
The handle created by the [[truxton_create]] call.

==<code>investigation_id</code>==
The string representation of a [https://en.wikipedia.org/wiki/Universally_unique_identifier globally unique identifier] of the investigation to export the hashes from.

==<code>filename</code>==
The name of the file where the hashes will be written.

=Sample=
<source lang="C" highlight="11">
void save_truxton_hash_set( char const * investigation_id )
{
char output_filename[ MAX_PATH ];

strcpy_s( output_filename, sizeof( output_filename ), "\\\\Server\\Hashsets\\Investigation_" );
strcat_s( output_filename, sizeof( output_filename ), guid );
strcat_s( output_filename, sizeof( output_filename ), ".hashset" );

uint64_t truxton = truxton_create();

truxton_create_investigation_hashset( truxton, investigation_id, output_filename );

truxton_destroy( truxton );
}
</source>

@@ Line 12: / Line 12: @@
 ==<code>investigation_id</code>==
 The string representation of a [https://en.wikipedia.org/wiki/Universally_unique_identifier globally unique identifier] of the investigation to export the hashes from.
 ==<code>filename</code>==

@@ Line 23: / Line 23: @@
     strcpy_s( output_filename, sizeof( output_filename ), "\\\\Server\\Hashsets\\Investigation_" );
-    strcat_s( output_filename, sizeof( output_filename ), guid );
+    strcat_s( output_filename, sizeof( output_filename ), investigation_id );
     strcat_s( output_filename, sizeof( output_filename ), ".hashset" );