Developer's Guide

Truxton Developer's Guide

How to Write an ETL

Truxton Stuff

• How Truxton Works
• Truxton SDK
• Database Tables - A detailed look at several of Truxton's tables
• Message Bus Drivers - How Truxton can be message queue technology agnostic
• Azure - Running Truxton on and engaging Azure services
• Turn on Syslogging
• Debugging the Loader
• Add A New File Type - How to add a new file type to Truxton and exploit it
• Depot file format - The way Truxton stores file contents
• Load List file format - Details on the load script format
• File Type Identification
• VC Redistributables
• Configuration System - All the different ways to configure Truxton
• Useful SQL Queries - Sample queries for accessing Truxton from a SQL tool (like dBeaver)
• Temporary Filenames - How to identify the source of temporary files
• Watch Desktop Logs
• TruxtonService.xml
• ETL Stages
• Message Bus Messages
• Load Validation - How to independently validate that Truxton is working correctly
• How to Secure Truxton Services - If you need Truxton to run on a locked down machine

Data Types

Truxton uses lots of defined constants and enums. Here's a list of them.

• Carve Options - The meaning of carving option flags
• Content Status - The status of the contents of a file.
• Data Types - How the bytes in a file can be interpreted.
• Depot Types - The different types of data that can be stored in a depot.
• Entity Types - The types of artifacts in Truxton
• Event Types - The types of events in Truxton
• File Content Origins - Tells you where the file contents came from
• Investigation Statuses - The different statuses of generic investigation
• Investigation Types - Some default types of investigations
• Load Configurations - The default paths media can take through the exploitation process.
• Location Types - The different types of geographic locations
• Media Load Percentage - A discussion about what the percent-complete value means during loading
• Media Status - The different states that media can be in
• Media Types - The formats of media that Truxton can ingest
• Message Participants - The types of participants in a communication
• Message Types - The different types of message that Truxton handles
• Object Types - The types of objects in Truxton
• Relation Types - The types of relationships between objects that Truxton supports
• URL Methods
• URL Types

Exploitation

• File Format Research
• SQLite Queries
• Time Epochs

Code Dependencies

• vcpkg
• Win32 Foundation Classes