Truxton file create artifact - Revision history

Sam at 11:02, 10 February 2021

2021-02-10T11:02:56Z

Sam at 11:21, 9 November 2020

2020-11-09T11:21:22Z

Sam: /* Sample */

2020-06-13T08:21:56Z

Sample

Sam at 21:15, 9 June 2020

2020-06-09T21:15:41Z

Sam at 21:10, 9 June 2020

2020-06-09T21:10:10Z

Sam: Created page with "This creates an artifact from this file that you can use in the Artifact API. An artifact object is how you add records to the `Entity Tab..."`


2020-06-09T20:59:47Z
Created page with "This creates an artifact from this file that you can use in the  Artifact API. An artifact object is how you add records to the <code>Entity Tab..."
New page
This creates an artifact from this file that you can use in the [[Truxton C API#Artifacts | Artifact API.]]

An artifact object is how you add records to the <code>[[Entity Table | Entity]]</code> table.



=Syntax=

<syntaxhighlight lang="C">

uint64_t truxton_file_create_artifact( uint64_t file_handle );

</syntaxhighlight>



=Parameters=

==<code>file_handle</code>==

The handle created by the [[truxton_file_open_id]] or [[truxton_file_open_md5]] call.



=Return value=

A handle to an artifact object.



=Sample=

<syntaxhighlight lang="C" highlight="34">

void add_folder(uint64_t truxton, uint64_t parent_file)

{

   truxton_start_adding_files(truxton);



   uint64_t child = truxton_child_file_create(truxton);



   char id[40];



   truxton_file_get_id(parent_file, id, sizeof(id));

   truxton_child_file_set_parent_id(child, id);

   truxton_child_file_set_type(child, Type_Directory);

   truxton_child_file_set_name(child, "Custom Exploits Folder");



   FILETIME now;



   GetSystemTimeAsFileTime(&now);



   ULARGE_INTEGER ticks;



   ticks.LowPart = now.dwLowDateTime;

   ticks.HighPart = now.dwHighDateTime;



   truxton_child_file_set_created(child, ticks.QuadPart);

   truxton_child_file_set_accessed(child, ticks.QuadPart);

   truxton_child_file_set_modified(child, ticks.QuadPart);



   truxton_child_file_set_origin(child, ORIGIN_GENERATED);



   if ( truxton_child_file_save(child) == 0 )

   {

      printf( "Failed to add child to Truxton\n" );

   }



   uint64_t artifact = truxton_child_file_create_artifact(child);



   truxton_artifact_set_type(artifact, ENTITY_TYPE_SERIAL_NUMBER);

   truxton_artifact_set_value(artifact, "1234" );

   truxton_artifact_save(artifact);

   truxton_artifact_destroy(artifact);



   truxton_child_file_destroy(child);

}

</syntaxhighlight>

@@ Line 23: / Line 23: @@
 =Sample=
 <source lang="C" highlight="5">
-void process_file(uint64_t truxton)
+void process_file( uint64_t truxton )
+{
-    uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");
+    uint64_t file = truxton_file_open_md5( truxton, "9ec8fb6095c35eff2b236863b7caaf10" );
-    uint64_t artifact = truxton_file_create_artifact(file);
+    uint64_t artifact = truxton_file_create_artifact( file );
-    truxton_artifact_set_type(artifact, ENTITY_TYPE_SERIAL_NUMBER);
+    truxton_artifact_set_type( artifact, ENTITY_TYPE_SERIAL_NUMBER );
-    truxton_artifact_set_value(artifact, "1234" );
+    truxton_artifact_set_value( artifact, "1234" );
-    truxton_artifact_save(artifact);
+    truxton_artifact_save( artifact );
-    truxton_artifact_destroy(artifact);
+    truxton_artifact_destroy( artifact );
-    truxton_file_free(file);
+    truxton_file_free( file );
+}
 </source>

@@ Line 27: / Line 27: @@
     truxton_artifact_destroy(artifact);
-    truxton_file_destroy(file);
+    truxton_file_free(file);
+}
 </syntaxhighlight>

@@ Line 15: / Line 15: @@
 =Sample=
-<syntaxhighlight lang="C" highlight="14">
+<syntaxhighlight lang="C" highlight="5">
 void process_file(uint64_t truxton)
+{
     uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");
     uint64_t artifact = truxton_file_create_artifact(file);

Truxton file create artifact - Revision history

Sam at 11:02, 10 February 2021

Sam at 11:21, 9 November 2020

Sam: /* Sample */

Sam at 21:15, 9 June 2020

Sam at 21:10, 9 June 2020

Sam: Created page with "This creates an artifact from this file that you can use in the Artifact API. An artifact object is how you add records to the Entity Tab..."

Sam: Created page with "This creates an artifact from this file that you can use in the Artifact API. An artifact object is how you add records to the `Entity Tab..."`