USBDevice Table - Revision history

Sam at 11:32, 3 February 2024

2024-02-03T11:32:42Z

Sam at 10:45, 29 January 2024

2024-01-29T10:45:57Z

Sam at 12:54, 8 December 2020

2020-12-08T12:54:48Z

Sam: Created page with "This represents a CREATE TABLE "USBDevice" ( "ID" uuid NOT NULL, "FileID" uuid NOT NULL, "MediaID" uuid NOT NULL, "Offset" bigint..."

2020-05-21T19:55:08Z

Created page with "This represents a <syntaxhighlight lang="SQL"> CREATE TABLE "USBDevice" ( "ID" uuid NOT NULL, "FileID" uuid NOT NULL, "MediaID" uuid NOT NULL, "Offset" bigint..."

New page

This represents a
<syntaxhighlight lang="SQL">
CREATE TABLE "USBDevice" (
"ID" uuid NOT NULL,
"FileID" uuid NOT NULL,
"MediaID" uuid NOT NULL,
"Offset" bigint DEFAULT (-1) NOT NULL,
"PID" integer DEFAULT 0 NOT NULL,
"VID" integer DEFAULT 0 NOT NULL,
"Revision" smallint DEFAULT 0 NOT NULL,
"USBDeviceTypeID" integer DEFAULT 0 NOT NULL,
"When" timestamp without time zone NOT NULL,
"DeviceID" uuid NOT NULL
);
</syntaxhighlight>

@@ Line 21: / Line 21: @@
 =Columns=
 ==<code>ID</code>==
-The globally unique identifier for this record. This is also the primary key for this table.
+The globally unique identifier for this record.
 ==<code>FileID</code>==
@@ Line 29: / Line 30: @@
 ==<code>MediaID</code>==
 The globally unique identifier of the media this USB device was found in.
-It corresponds to the <code>[ID]</code> column of the <code>[Media]</code> table.
+It corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table.
 ==<code>Offset</code>==
-The offset into the file where this USB device was referenced. If this value is -1, the offset was not known.
+The offset into the file where this USB device was referenced.
 ==<code>PID</code>==
-The Product ID. It corresponds to the <code>[PID]</code> column of the <code>[USBPIDVID]</code> table.
+The Product ID.
 ==<code>VID</code>==
-Vendor Identifier. It corresponds to the <code>[VID]</code> column of the <code>[USBPIDVID]</code> table.
+Vendor Identifier.
 ==<code>Revision</code>==
@@ Line 48: / Line 52: @@
 ==<code>When</code>==
-When the USB device was seen. The device was connected to the host system at this time.
+When the USB device was seen.
 ==<code>DeviceID</code>==
-The globally unique identifier given to the device by Windows. It does not correspond to any table in Truxton.
+The globally unique identifier given to the device by Windows.

@@ Line 1: / Line 1: @@
 This represents a [https://en.wikipedia.org/wiki/USB USB] device found in the exploited media.
 <source lang="SQL">
 CREATE TABLE "USBDevice"
@@ Line 16: / Line 18: @@
 );
 </source>

@@ Line 1: / Line 1: @@
-This represents a
+This represents a [https://en.wikipedia.org/wiki/USB USB] device found in the exploited media.
-<syntaxhighlight lang="SQL">
-CREATE TABLE "USBDevice" (
+<source lang="SQL">
-    "ID" uuid NOT NULL,
+CREATE TABLE "USBDevice"
-    "FileID" uuid NOT NULL,
-    "MediaID" uuid NOT NULL,
+  "ID" uuid NOT NULL,
-    "Offset" bigint DEFAULT (-1) NOT NULL,
+  "FileID" uuid NOT NULL,
-    "PID" integer DEFAULT 0 NOT NULL,
+  "MediaID" uuid NOT NULL,
-    "VID" integer DEFAULT 0 NOT NULL,
+  "Offset" bigint DEFAULT (-1) NOT NULL,
-    "Revision" smallint DEFAULT 0 NOT NULL,
+  "PID" integer DEFAULT 0 NOT NULL,
-    "USBDeviceTypeID" integer DEFAULT 0 NOT NULL,
+  "VID" integer DEFAULT 0 NOT NULL,
-    "When" timestamp without time zone NOT NULL,
+  "Revision" smallint DEFAULT 0 NOT NULL,
-    "DeviceID" uuid NOT NULL
+  "USBDeviceTypeID" integer DEFAULT 0 NOT NULL,
 );
-</syntaxhighlight>
+</source>