Main Page

Welcome to the Truxton Technical Wiki. This wiki is here for developers to extend Truxton's capabilities. There aren't any forensic techniques discussed here unless someone makes a page for it. Truxton Forensics will be contributing articles and sample code to allow you to make Truxton do what you need.

• How Truxton Works - A brief overview of what Truxton does
• File Types Supported - A list of files that Truxton knows about

For Power Users

• Exploitation Layer - A description of how Truxton exploits data
• Loader Configuration - Information on configuring Truxton
• Hash Set File Format - For eliminating useless files based on the MD5 hash of the contents
• Load List File Format - For scripting the loading of lots of media
• Depot File Format - This is how Truxton stores the contents of files extracted from source media
• Lessons Learned - How to do some non-obvious things
• Syslog - For monitoring everything
• Message Concentrator - How to reduce the number of database connections
• Configuration System - Everything you ever wanted to know about how to configure Truxton
• Loading Strategies - Discussion on the different ways to load data into Truxton
• Truxton Service - What the Truxton Service does
• Les - The Load Status Monitor
• Log File Locations - Where Truxton logs things
• Securing Truxton Services - For customers who need it
• Truxton Forensic Rack - When you've got lots of data to process
• Creating NSRL Hashset - Step by step instructions on creating the NSRL hashset
• Helpful scripts - Scripts we have found useful
• Manually Uninstall Truxton - Remove all evidence that Truxton was on a machine

For Developers

The following are starting points for developers.

• Truxton SDK
• Python Support
• Developer's Guide