Difference between revisions of "Truxton URL Interface"
(→Sample) |
|||
| Line 48: | Line 48: | ||
==Parameters== | ==Parameters== | ||
===<code>GUID</code>=== | ===<code>GUID</code>=== | ||
| − | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the | + | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the event. |
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table. | ||
| Line 66: | Line 66: | ||
==Parameters== | ==Parameters== | ||
===<code>GUID</code>=== | ===<code>GUID</code>=== | ||
| − | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the | + | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the file. |
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table. | ||
| Line 75: | Line 75: | ||
=Hash= | =Hash= | ||
| − | You can link directly to a specific | + | You can link directly to a specific hash view in Truxton. |
==Syntax== | ==Syntax== | ||
<pre> | <pre> | ||
| − | truxton://hash/{GUID} | + | truxton://hash/{GUID} |
</pre> | </pre> | ||
| Line 85: | Line 85: | ||
===<code>hash</code>=== | ===<code>hash</code>=== | ||
An MD5 or SHA1 hash. | An MD5 or SHA1 hash. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton. | ||
| + | </source> | ||
=Investigation= | =Investigation= | ||
| − | You can link directly to a specific investigation | + | You can link directly to a specific investigation in Truxton. |
==Syntax== | ==Syntax== | ||
<pre> | <pre> | ||
| − | truxton://investigation/{GUID} | + | truxton://investigation/{GUID} |
</pre> | </pre> | ||
==Parameters== | ==Parameters== | ||
===<code>GUID</code>=== | ===<code>GUID</code>=== | ||
| − | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the | + | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the investigation. |
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table. | This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton. | ||
| + | </source> | ||
=Location= | =Location= | ||
| Line 111: | Line 121: | ||
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location. | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location. | ||
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton. | ||
| + | </source> | ||
=md5= | =md5= | ||
| − | You can link directly to a specific | + | You can link directly to a specific hash view in Truxton. |
==Syntax== | ==Syntax== | ||
| Line 123: | Line 138: | ||
===<code>hash</code>=== | ===<code>hash</code>=== | ||
An MD5 hash. | An MD5 hash. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton. | ||
| + | </source> | ||
=Media= | =Media= | ||
Revision as of 05:40, 11 December 2025
Truxton installs a protocol handler for the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.
Contents
Artifact
You can link directly to a specific artifact in Truxton.
Syntax
truxton://artifact/{GUID}
Parameters
GUID
The GUID of the artifact.
This corresponds to the [ID] column of the [Entity] table.
Sample
Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.
Camera
You can link directly to a specific camera information view in Truxton.
Syntax
truxton://camera/{GUID}
Parameters
GUID
The GUID of the camera information.
This corresponds to the [ID] column of the [EXIF] table.
Sample
Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.
Event
You can link directly to a specific event view in Truxton.
Syntax
truxton://event/{GUID}
Parameters
GUID
The GUID of the event.
This corresponds to the [ID] column of the [Event] table.
Sample
Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
File
You can link directly to a specific file view in Truxton.
Syntax
truxton://file/{GUID}
Parameters
GUID
The GUID of the file.
This corresponds to the [ID] column of the [File] table.
Sample
Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.
Hash
You can link directly to a specific hash view in Truxton.
Syntax
truxton://hash/{GUID}
Parameters
hash
An MD5 or SHA1 hash.
Sample
Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
Investigation
You can link directly to a specific investigation in Truxton.
Syntax
truxton://investigation/{GUID}
Parameters
GUID
The GUID of the investigation.
This corresponds to the [ID] column of the [Investigation] table.
Sample
Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.
Location
You can link directly to a specific location view in Truxton.
Syntax
truxton://location/{GUID}
Parameters
GUID
The GUID of the location.
This corresponds to the [ID] column of the [Location] table.
Sample
Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.
md5
You can link directly to a specific hash view in Truxton.
Syntax
truxton://md5/{hash}
Parameters
hash
An MD5 hash.
Sample
Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
Media
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://media/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [Media] table.
Message
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://message/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [Message] table.
sha1
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://sha1/{hash}
Parameters
hash
The SHA1 hash value
tutorial
Re-display the initial desktop tutorial
Syntax
truxton://tutorial
Parameters
GUID
The GUID of the media.
Website
You can link directly to a specific website visit view in Truxton.
Syntax
truxton://website/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [WebsiteVisit] table.
