Difference between revisions of "Exploitation Layer"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
The Exploitation Layer is the collection of processes on the [[Message Bus]] that exploit data in Truxton. | The Exploitation Layer is the collection of processes on the [[Message Bus]] that exploit data in Truxton. | ||
| + | These are separate processes (or groups of processes) that operate on a single file at a time that [[Load]] extracted from the media. | ||
=Description= | =Description= | ||
Revision as of 17:16, 5 February 2021
The Exploitation Layer is the collection of processes on the Message Bus that exploit data in Truxton. These are separate processes (or groups of processes) that operate on a single file at a time that Load extracted from the media.
Description
The exploitation layer is typically controlled by the Truxton Service and is configurable through the TruxtonService.xml file.
Default Exploiters
Truxton ships with the following members of the ETL layer.
| Name | Description |
|---|---|
| Load | The loader of data |
| Alert | For generating alerts |
| Archives | Expanding some archive files |
| Carve | Finding files in freespace |
| ContactSheet | Creating video thumbnails |
| For parsing EMail | |
| Expand | Extracting information from files |
| Finished | For tidying things up at the end of a load |
| Identify | For identifying files based on their content |
| Poly | For expanding multi-part files |
| Registry | Truxton's Regsitry exploitation |
| RegRipper | For processing Windows Registry files |
| RemoteFileExpander | Using proprietary technology to expand files |
| Report | For preparing reports from raw data |
| Stitch | For fragmented file carving |
| Thumbnail | Create thumbnails of images |
| Yara | For scanning file contents and tagging |
