Difference between revisions of "Database Tables"
Jump to navigation
Jump to search
| Line 16: | Line 16: | ||
=Reference Tables= | =Reference Tables= | ||
These tables exist only to give meanings to magic values so humans can better comprehend it. | These tables exist only to give meanings to magic values so humans can better comprehend it. | ||
| + | * <code>[AlertStatus]</code> gives meaning to integer values found in the <code>[AlertStatusID]</code> column of the <code>[Alert]</code> table. | ||
| + | * <code>[BOLOStatus]</code> gives meaning to integer values found in the <code>[BOLOStatusID]</code> column of the <code>[BOLO]</code> table. | ||
| + | * <code>[ContentStatus]</code> gives meaning to integer values found in the <code>[ContentStatusID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table. These values are also [[Content Status|defined constants.]] | ||
| + | * <code>[DataType]</code> gives meaning to integer values found in the <code>[DataTypeID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table. These values are also [[DATA TYPE|defined constants.]] | ||
* <code>[EntityType]</code> gives meaning to integer values found in the <code>[EntityTypeID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table. These values are also [[Entity Types|defined constants.]] | * <code>[EntityType]</code> gives meaning to integer values found in the <code>[EntityTypeID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table. These values are also [[Entity Types|defined constants.]] | ||
* <code>[InvestigationType]</code> gives meaning to integer values found in the <code>[InvestigationTypeID]</code> column of the <code>[Investigation]</code> table. These values are also [[Investigation Types|defined constants.]] | * <code>[InvestigationType]</code> gives meaning to integer values found in the <code>[InvestigationTypeID]</code> column of the <code>[Investigation]</code> table. These values are also [[Investigation Types|defined constants.]] | ||
* <code>[InvestigationStatus]</code> gives meaning to integer values found in the <code>[InvestigationStatusID]</code> column of the <code>[Investigation]</code> table. These values are also [[Investigation Statuses|defined constants.]] | * <code>[InvestigationStatus]</code> gives meaning to integer values found in the <code>[InvestigationStatusID]</code> column of the <code>[Investigation]</code> table. These values are also [[Investigation Statuses|defined constants.]] | ||
Revision as of 13:38, 28 December 2020
The Truxton database holds "hot" tables that are constantly written to as well as reference (read-only) tables.
Data Tables
These tables hold data gleaned from exploiting media.
[Entity]also known as artifacts.[ETLRoute][Event][EXIF][ExpandedFile][File][Location][Relation][USBDevice][WebsiteVisit]
Reference Tables
These tables exist only to give meanings to magic values so humans can better comprehend it.
[AlertStatus]gives meaning to integer values found in the[AlertStatusID]column of the[Alert]table.[BOLOStatus]gives meaning to integer values found in the[BOLOStatusID]column of the[BOLO]table.[ContentStatus]gives meaning to integer values found in the[ContentStatusID]column of the[File]table. These values are also defined constants.[DataType]gives meaning to integer values found in the[DataTypeID]column of the[Entity]table. These values are also defined constants.[EntityType]gives meaning to integer values found in the[EntityTypeID]column of the[Entity]table. These values are also defined constants.[InvestigationType]gives meaning to integer values found in the[InvestigationTypeID]column of the[Investigation]table. These values are also defined constants.[InvestigationStatus]gives meaning to integer values found in the[InvestigationStatusID]column of the[Investigation]table. These values are also defined constants.
