Sam: Created page with "This retrieves the create date of the investigation. This corresponds to the `[Opened]` column of the `[Investigation]` table. It represents when this in..."

2023-05-30T09:06:02Z

Created page with "This retrieves the create date of the investigation. This corresponds to the <code>[Opened]</code> column of the <code>[Investigation]</code> table. It represents when this in..."

New page

This retrieves the create date of the investigation.
This corresponds to the <code>[Opened]</code> column of the <code>[Investigation]</code> table.
It represents when this investigation was created in Truxton.

=Syntax=
<source lang="C">
uint64_t truxton_investigation_get_opened( uint64_t investigation_handle );
</source>

=Parameters=
==<code>investigation_handle</code>==
The handle created by the [[truxton_investigation_create|truxton_investigation_create()]].

=Return value=
The creation date of the investigation in [https://docs.microsoft.com/en-us/windows/win32/api/minwinbase/ns-minwinbase-filetime FILETIME] ticks.

=Sample=
<source lang="C" highlight="3">
void print_valid( uint64_t investigation )
{
uint64_t creation_date = truxton_investigation_get_opened( investigation );

if ( creation_date == 0 )
{
printf( "The investigation has no opened date\n" );
}
else
{
printf( "The investigation has a opened date\n" );
}
}</source>

Truxton investigation get opened - Revision history

Sam: Created page with "This retrieves the create date of the investigation. This corresponds to the [Opened] column of the [Investigation] table. It represents when this in..."

Sam: Created page with "This retrieves the create date of the investigation. This corresponds to the `[Opened]` column of the `[Investigation]` table. It represents when this in..."