Difference between revisions of "Truxton event set title"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "This sets the short title of the event. This is seen on the timeline view in Truxton Analyst desktop. =Syntax= <source lang="C"> void truxton_event_set_title( uint64_t event_...")
 
Line 17: Line 17:
 
=Sample=
 
=Sample=
 
<source lang="C" highlight="5">
 
<source lang="C" highlight="5">
−
void dump_event(uint64_t event_handle)
+
void initialize_investigation(uint64_t truxton, char const * media_id, char const * file_id)
 
{
 
{
−
   char guid_string[ 40 ];
+
   uint64_t event_handle = truxton_event_create(truxton);
  
−
   truxton_event_get_file_id( event_handle, guid_string, sizeof(guid_string) );
+
   truxton_event_set_title( event_handle, "Phase 1" );
−
   printf( "File ID is %s\n", guid_string );
+
  truxton_event_set_description( event_handle, "As described by SA Barnett" );
 +
  truxton_event_set_start( event_handle, get_ticks( "2016-07-31T12:00:00-05:00" ) );
 +
   truxton_event_set_end( event_handle, get_ticks( "2017-01-04T12:00:00-05:00" ) );
 +
  truxton_event_set_type( event_handle, EVENT_TYPE_ADDED_BY_ANALYST );
 +
  truxton_event_set_media_id( event_handle, media_id );
 +
  truxton_event_set_file_id( event_handle, file_id );
  
−
   truxton_event_get_media_id( event_handle, guid_string, sizeof(guid_string) );
+
   truxton_event_save( event_handle );
−
  printf( "Media ID is %s\n", guid_string );
 
  
−
   truxton_event_get_id( event_handle, guid_string, sizeof(guid_string) );
+
   char id[ 65 ];
−
  printf( "Event ID is %s\n", guid_string );
 
  
−
   uint64_t value = truxton_event_get_type( event_handle );
+
   truxton_event_get_id( event_handle, id, sizeof( id ) );
−
  printf( "Type is %" PRIu64 "\n", value );
 
  
−
  value = truxton_event_get_start( event_handle );
+
   printf( "Event ID is %s\n", id );
−
   printf( "Start is %" PRIu64 "\n", value );
 
  
−
   value = truxton_event_get_end( event_handle );
+
   truxton_event_destroy(artifact);
−
  printf( "End is %" PRIu64 "\n", value );
 
 
}
 
}
 
</source>
 
</source>

Revision as of 13:00, 12 November 2020

This sets the short title of the event. This is seen on the timeline view in Truxton Analyst desktop.

Syntax

void truxton_event_set_title( uint64_t event_handle, char const * title );

Parameters

event_handle

The handle to an event created by the truxton_event_create call.

title

A short title of the event. It corresponds to the [Title] column of the [Event] table.

Sample

void initialize_investigation(uint64_t truxton, char const * media_id, char const * file_id)
{
   uint64_t event_handle = truxton_event_create(truxton);

   truxton_event_set_title( event_handle, "Phase 1" );
   truxton_event_set_description( event_handle, "As described by SA Barnett" );
   truxton_event_set_start( event_handle, get_ticks( "2016-07-31T12:00:00-05:00" ) );
   truxton_event_set_end( event_handle, get_ticks( "2017-01-04T12:00:00-05:00" ) );
   truxton_event_set_type( event_handle, EVENT_TYPE_ADDED_BY_ANALYST );
   truxton_event_set_media_id( event_handle, media_id );
   truxton_event_set_file_id( event_handle, file_id );

   truxton_event_save( event_handle );

   char id[ 65 ];

   truxton_event_get_id( event_handle, id, sizeof( id ) );

   printf( "Event ID is %s\n", id );

   truxton_event_destroy(artifact);
}
Retrieved from "https://truxwiki.com/index.php?title=Truxton_event_set_title&oldid=2499"