Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 297: | Line 297: | ||
| [[Type_XRY_XML_File]] | | [[Type_XRY_XML_File]] | ||
| [[Entity Table|Artifacts]], [[Event Table|Events]], [[Location Table|Locations]], Messages, [[WebsiteVisit Table|URLs]] | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Location Table|Locations]], Messages, [[WebsiteVisit Table|URLs]] | ||
| + | |- | ||
| + | | [[Type_Apple_Voicemail_Database]] | ||
| + | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_Apple_Find_My_iPhone_Database]] | ||
| + | | [[Type_File_Details|File Details]], [[Location Table|Locations]] | ||
| + | |- | ||
| + | | [[Type_Windows_Link]] | ||
| + | | [[Entity Table|Artifacts]], [[Type_File_Details|File Details]], [[WebsiteVisit Table|URLs]] | ||
|} | |} | ||
Revision as of 12:09, 22 July 2020
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
Expand exploits the following file types.
