Difference between revisions of "Truxton event add note"
Jump to navigation
Jump to search
(Created page with "This will add a note to the event. It will cause a record to be created in the <code>[Tagged]</code> table. =Syntax= <source lang="C"> int truxton_event_add_note( uint64_t ev...") |
|||
| Line 1: | Line 1: | ||
This will add a note to the event. | This will add a note to the event. | ||
| − | It will cause a record to be created in the <code>[ | + | It will cause a record to be created in the <code>[InvestigatorNote]</code> table. |
=Syntax= | =Syntax= | ||
Latest revision as of 08:34, 1 October 2022
This will add a note to the event.
It will cause a record to be created in the [InvestigatorNote] table.
Syntax
int truxton_event_add_note( uint64_t event_handle, char const * text );
Parameters
event_handle
The handle created by the truxton_event_create call.
text
The contents of the note.
Return value
A non-zero value on success, zero on failure.
Sample
void initialize_investigation( uint64_t truxton, char const * media_id, char const * file_id )
{
uint64_t event_handle = truxton_event_create( truxton );
truxton_event_set_name( event_handle, "Phase 1" );
truxton_event_set_description( event_handle, "As described by SA Barnett" );
truxton_event_set_start( event_handle, get_ticks( "2016-07-31T12:00:00-05:00" ) );
truxton_event_set_end( event_handle, get_ticks( "2017-01-04T12:00:00-05:00" ) );
truxton_event_set_type( event_handle, EVENT_TYPE_ADDED_BY_ANALYST );
truxton_event_set_media_id( event_handle, media_id );
truxton_event_set_file_id( event_handle, file_id );
truxton_event_save( event_handle );
char id[ 65 ];
truxton_event_get_id( event_handle, id, sizeof( id ) );
printf( "Event ID is %s\n", id );
truxton_event_add_note( event_handle, "If only we could have known." );
truxton_event_destroy( event_handle );
}