Difference between revisions of "Truxton URL Interface"

From truxwiki.com
Jump to navigation Jump to search
 
(4 intermediate revisions by the same user not shown)
Line 14: Line 14:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.
 +
</source>
  
 
=Camera=
 
=Camera=
Line 27: Line 32:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.
 +
</source>
  
 
=Event=
 
=Event=
Line 38: Line 48:
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the event.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
 +
</source>
  
 
=File=
 
=File=
Line 51: Line 66:
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the file.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.
 +
</source>
  
 
=Hash=
 
=Hash=
−
You can link directly to a specific file view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://hash/{GUID}  
+
truxton://hash/{GUID}
 
</pre>
 
</pre>
  
Line 65: Line 85:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
An MD5 or SHA1 hash.
 
An MD5 or SHA1 hash.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Investigation=
 
=Investigation=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific investigation in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://investigation/{GUID}  
+
truxton://investigation/{GUID}
 
</pre>
 
</pre>
  
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the investigation.
 
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.
 
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Location=
 
=Location=
Line 91: Line 121:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.
 +
</source>
  
 
=md5=
 
=md5=
−
You can link directly to a specific file view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
Line 103: Line 138:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
An MD5 hash.
 
An MD5 hash.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Media=
 
=Media=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific media view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://media/{GUID}  
+
truxton://media/{GUID}
 
</pre>
 
</pre>
  
Line 115: Line 155:
 
===<code>GUID</code>===
 
===<code>GUID</code>===
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
−
This corresponds to the <code>[ID]</code> column of the <code>[Media]</code> table.
+
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table.
 +
 
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://media/33f9ab81-e581-8299-2338-3889e8314e09">here</a> to see the media in Truxton.
 +
</source>
  
 
=Message=
 
=Message=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific message view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://message/{GUID}  
+
truxton://message/{GUID}
 
</pre>
 
</pre>
  
Line 129: Line 174:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.
 
This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://message/69394b56-7957-a1c6-7aa2-6743000001c7">here</a> to see the message in Truxton.
 +
</source>
  
 
=sha1=
 
=sha1=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://sha1/{hash}  
+
truxton://sha1/{hash}
 
</pre>
 
</pre>
  
Line 141: Line 191:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
The SHA1 hash value
 
The SHA1 hash value
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://sha1/2d2b30f8dceeb6d76be8292975e18a8c621e596e">here</a> to see the hash in Truxton.
 +
</source>
  
 
=tutorial=
 
=tutorial=
Line 150: Line 205:
 
</pre>
 
</pre>
  
−
==Parameters==
+
==Sample==
−
===<code>GUID</code>===
+
<source lang="HTML">
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+
Click <a href="truxton://tutorial">here</a> to run the Truxton tutorial.
 +
</source>
  
 
=Website=
 
=Website=
Line 159: Line 215:
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://website/{GUID}  
+
truxton://website/{GUID}
 
</pre>
 
</pre>
  
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the website.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://website/69394b56-7957-a1c6-7aa2-674300004a48">here</a> to see the website in Truxton.
 +
</source>

Latest revision as of 05:52, 11 December 2025

Truxton installs a protocol handler for the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.

Artifact

You can link directly to a specific artifact in Truxton.

Syntax

truxton://artifact/{GUID}

Parameters

GUID

The GUID of the artifact. This corresponds to the [ID] column of the [Entity] table.

Sample

Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.

Camera

You can link directly to a specific camera information view in Truxton.

Syntax

truxton://camera/{GUID}

Parameters

GUID

The GUID of the camera information. This corresponds to the [ID] column of the [EXIF] table.

Sample

Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.

Event

You can link directly to a specific event view in Truxton.

Syntax

truxton://event/{GUID}

Parameters

GUID

The GUID of the event. This corresponds to the [ID] column of the [Event] table.

Sample

Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.

File

You can link directly to a specific file view in Truxton.

Syntax

truxton://file/{GUID}

Parameters

GUID

The GUID of the file. This corresponds to the [ID] column of the [File] table.

Sample

Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.

Hash

You can link directly to a specific hash view in Truxton.

Syntax

truxton://hash/{GUID}

Parameters

hash

An MD5 or SHA1 hash.

Sample

Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.

Investigation

You can link directly to a specific investigation in Truxton.

Syntax

truxton://investigation/{GUID}

Parameters

GUID

The GUID of the investigation. This corresponds to the [ID] column of the [Investigation] table.

Sample

Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.

Location

You can link directly to a specific location view in Truxton.

Syntax

truxton://location/{GUID}

Parameters

GUID

The GUID of the location. This corresponds to the [ID] column of the [Location] table.

Sample

Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.

md5

You can link directly to a specific hash view in Truxton.

Syntax

truxton://md5/{hash}

Parameters

hash

An MD5 hash.

Sample

Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.

Media

You can link directly to a specific media view in Truxton.

Syntax

truxton://media/{GUID}

Parameters

GUID

The GUID of the media. This corresponds to the [ID] column of the [Media] table.

Sample

Click <a href="truxton://media/33f9ab81-e581-8299-2338-3889e8314e09">here</a> to see the media in Truxton.

Message

You can link directly to a specific message view in Truxton.

Syntax

truxton://message/{GUID}

Parameters

GUID

The GUID of the media. This corresponds to the [ID] column of the [Message] table.

Sample

Click <a href="truxton://message/69394b56-7957-a1c6-7aa2-6743000001c7">here</a> to see the message in Truxton.

sha1

You can link directly to a specific hash view in Truxton.

Syntax

truxton://sha1/{hash}

Parameters

hash

The SHA1 hash value

Sample

Click <a href="truxton://sha1/2d2b30f8dceeb6d76be8292975e18a8c621e596e">here</a> to see the hash in Truxton.

tutorial

Re-display the initial desktop tutorial

Syntax

truxton://tutorial

Sample

Click <a href="truxton://tutorial">here</a> to run the Truxton tutorial.

Website

You can link directly to a specific website visit view in Truxton.

Syntax

truxton://website/{GUID}

Parameters

GUID

The GUID of the website. This corresponds to the [ID] column of the [WebsiteVisit] table.

Sample

Click <a href="truxton://website/69394b56-7957-a1c6-7aa2-674300004a48">here</a> to see the website in Truxton.
Retrieved from "https://truxwiki.com/index.php?title=Truxton_URL_Interface&oldid=10680"