Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 191: | Line 191: | ||
|- | |- | ||
| [[Type_Cellebrite_1]] | | [[Type_Cellebrite_1]] | ||
| − | | [[Entity Table|Artifacts]], [[Event Table|Events]] | + | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Location Table|Locations]], Messages |
|- | |- | ||
| [[Type_Cellebrite_2]] | | [[Type_Cellebrite_2]] | ||
| − | | [[Entity Table|Artifacts]], [[Event Table|Events]] | + | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Location Table|Locations]], Messages, [[WebsiteVisit Table|URLs]] |
|- | |- | ||
| [[Type_MPEG2Video]] | | [[Type_MPEG2Video]] | ||
| Line 288: | Line 288: | ||
| [[Type_QuickTime_Video]] | | [[Type_QuickTime_Video]] | ||
| [[Type_File_Details|File Details]], [[Location Table|Locations]] | | [[Type_File_Details|File Details]], [[Location Table|Locations]] | ||
| + | |- | ||
| + | | [[Type_QuickTime_Cache]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Safari_Cache]] | ||
| + | | [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_XRY_XML_File]] | ||
| + | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Location Table|Locations]], Messages, [[WebsiteVisit Table|URLs]] | ||
|} | |} | ||
Revision as of 12:04, 22 July 2020
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
Expand exploits the following file types.
