Difference between revisions of "Expand"
Jump to navigation
Jump to search
| Line 706: | Line 706: | ||
| [[Type_GeoPosition_Cache]] | | [[Type_GeoPosition_Cache]] | ||
| [[Type_File_Details|File Details]], [[Location Table|Locations]] | | [[Type_File_Details|File Details]], [[Location Table|Locations]] | ||
| − | | | + | |- |
| + | | [[Type_Webview_Database]] | ||
| + | | [[Entity Table|Artifacts]], [[Type_File_Details|File Details]], [[WebsiteVisit Table|URLs]] | ||
| + | |- | ||
| + | | [[Type_Twitter_Database]] | ||
| + | | [[Entity Table|Artifacts]], [[Type_File_Details|File Details]], [[WebsiteVisit Table|URLs]] | ||
| + | |- | ||
| + | | [[Type_PGP_Public_Keyring]] | ||
| + | | [[Entity Table|Artifacts]], [[Event Table|Events]], [[Type_File_Details|File Details]] | ||
| + | |- | ||
| + | | [[Type_WhatsApp_Database]] | ||
| + | | [[Entity Table|Artifacts]], Files, [[Type_File_Details|File Details]], [[Location Table|Locations]], Messages, [[WebsiteVisit Table|URLs]] | ||
==Event Log Records== | ==Event Log Records== | ||
Revision as of 03:55, 23 July 2020
| Executable | Expand.exe
|
| Stage | 3 |
| Percent Complete | 48% |
| Message Queue | expand
|
Expand is the most capable exploitation process. It produces files and artifacts.
Capabilities
File Types
Expand processes the following types of files.
