Truxton file create event - Revision history

Sam at 08:55, 13 February 2021

2021-02-13T08:55:48Z

2020-11-11T07:49:15Z

2020-06-13T08:22:42Z

Sample

2020-06-10T07:40:42Z

2020-06-09T21:17:13Z

Sample

@@ Line 20: / Line 20: @@
 =Sample=
 <source lang="C" highlight="5">
-void process_file(uint64_t truxton)
+void process_file( uint64_t truxton )
+{
-    uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");
+    uint64_t file = truxton_file_open_md5( truxton, "9ec8fb6095c35eff2b236863b7caaf10" );
     uint64_t event = truxton_file_create_event( file );
-    truxton_event_set_type(event, EVENT_TYPE_POSSIBLE_INFECTION);
+    truxton_event_set_type( event, EVENT_TYPE_POSSIBLE_INFECTION );
-    truxton_event_set_start(event, truxton_file_get_created( file ) );
+    truxton_event_set_start( event, truxton_file_get_created( file ) );
-    truxton_event_set_end(event, truxton_file_get_modified( file ) );
+    truxton_event_set_end( event, truxton_file_get_modified( file ) );
-    truxton_event_set_title(event, "Fancy Bear Panda Hurricane" );
+    truxton_event_set_title( event, "Fancy Bear Panda Hurricane" );
-    truxton_event_set_description(event, "Russian Malware repurposed by Chinese military used in FBI investigation" );
+    truxton_event_set_description( event, "Russian Malware repurposed by Chinese military used in FBI investigation" );
-    truxton_event_save(event);
+    truxton_event_save( event );
-    truxton_event_destroy(event);
+    truxton_event_destroy( event );
-    truxton_file_free(file);
+    truxton_file_free( file );
+}
 </source>

@@ Line 31: / Line 31: @@
     truxton_event_destroy(event);
-    truxton_file_destroy(file);
+    truxton_file_free(file);
+}
 </syntaxhighlight>

@@ Line 1: / Line 1: @@
 This creates an event from this file that you can use in the [[Truxton C API#Event | Event API.]]
-An event object is how you add records to the <code>[[Event Table | Event]]</code> table.
+An event object is how you add records to the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 The resulting event object will automatically be associated with the file it was created from and with the media the file belongs to.
 =Syntax=
-<syntaxhighlight lang="C">
+<source lang="C">
 uint64_t truxton_file_create_event( uint64_t file_handle );
-</syntaxhighlight>
+</source>
 =Parameters=
@@ Line 14: / Line 14: @@
 =Return value=
 A handle to an event object.
 =Sample=
-<syntaxhighlight lang="C" highlight="5">
+<source lang="C" highlight="5">
 void process_file(uint64_t truxton)
+{
     uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");
-    uint64_t event = truxton_file_create_event(file);
+    uint64_t event = truxton_file_create_event( file );
     truxton_event_set_type(event, EVENT_TYPE_POSSIBLE_INFECTION);
@@ Line 33: / Line 36: @@
     truxton_file_free(file);
+}
-</syntaxhighlight>
+</source>