Main Page

Truxton

Welcome to the technical Wiki for the Truxton digital forensics system.

This wiki is here for developers and power users to extend Truxton's capabilities. Truxton Forensics will be contributing articles and sample code to allow you to make Truxton do what you need.

• What is Truxton? - Glad you asked...
• Release Notes - What's new in each release
• File Types Supported - A list of files that Truxton knows about
• Loading data into Truxton
• Community Edition - The free version of Truxton
• How Truxton Works - A brief overview of what Truxton does
• Why is Truxton so Extensible - Why can you customize Truxton in so many ways
• Easy Button Load - Easiest possible way to use Truxton
• eDiscovery Load - What to do with eDiscovery dumps
• Log4j Vulnerability - How to fix

Information

• Configuration System - Everything you ever wanted to know about how to configure Truxton
• Exploitation Layer - A description of how Truxton exploits data
• Les - The Load Status Monitor
• Truxton Service - What the Truxton Service does

For Power Users

• Change Report Logo - Customize the logo used in Truxton's reports
• Creating NSRL Hashset - Step by step instructions for creating the NSRL hashset
• Depot File Format - This is how Truxton stores the contents of files extracted from source media
• Generic SQLite Exploitation - How to exploit SQLite files that aren't supported by Truxton
• Hash Set File Format - For eliminating useless files based on the MD5 hash of the contents
• Helpful scripts - Scripts we have found useful
• Install Truxton - Different Truxton installs
• Integrating Truxton - How to add Truxton to your program
• Lessons Learned - How to do some non-obvious things
• Loader Configuration - Information on configuring Truxton
• Load List File Format - For scripting the loading of lots of media
• Loading Strategies - Discussion on the different ways to load data into Truxton
• Log File Locations - Where Truxton logs things
• Logging - Details about Truxton's logging
• Maintenance - How to perform a Truxton oil change
• Manually Uninstall Truxton - Remove all evidence that Truxton was on a machine
• Message Concentrator - How to reduce the number of database connections
• Securing Truxton Services - For customers who need it
• Syslog - For monitoring everything
• Truxton Forensic Rack - When you've got lots of data to process
• What Gets Installed - How Truxton changes your system

For Developers

The following are starting points for developers.

• Developer's Guide - The starting point for extending Truxton
• Python Support - Yes you can use Python with Truxton
• Truxton SDK - The Truxton software development kit