Difference between revisions of "FileType Template"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "{| style="float:right;border:1px solid black" |+ << Details >> | Defined Constant | <code>Type_DEFINED VALUE</code> |-...")
 
 
(5 intermediate revisions by the same user not shown)
Line 2: Line 2:
 
|+ [[Type_KML_Folder_Snippet|<<]] Details [[Type_KML_Folder_Snippet|>>]]
 
|+ [[Type_KML_Folder_Snippet|<<]] Details [[Type_KML_Folder_Snippet|>>]]
 
| Defined Constant
 
| Defined Constant
| <code>Type_DEFINED VALUE</code>
+
| <code>Type_XXX</code>
 
|-
 
|-
 
| File Type Value
 
| File Type Value
| 204
+
| 1229
 
|-
 
|-
 
| Parent Type
 
| Parent Type
| [[Type_JPEG|JPEG]]
+
| [[Type_SQLite_Database|SQLite]]
 +
| None
 
|-
 
|-
 
| Carve
 
| Carve
Line 20: Line 21:
 
|-
 
|-
 
| MIME Type
 
| MIME Type
| <code>image/jpeg</code>
+
| <code>application/octet-stream</code>
 
|-
 
|-
 
| Filename Extension
 
| Filename Extension
Line 43: Line 44:
 
* [[Event Types|EVENT_TYPE_TOOK_A_PICTURE]]
 
* [[Event Types|EVENT_TYPE_TOOK_A_PICTURE]]
 
* [[Location Types|LOCATION_TYPE_EXIF]]
 
* [[Location Types|LOCATION_TYPE_EXIF]]
 +
* [[URL Types|URL_TYPE_XXX]]
 
* [[Type_Camera_Information]]
 
* [[Type_Camera_Information]]
 
* [[Type_File_Details]]
 
* [[Type_File_Details]]
 +
* [[Type_SQLite_Sample]]
 
* [[Type_Location]]
 
* [[Type_Location]]
  

Latest revision as of 10:27, 11 July 2026

<< Details >>
Defined Constant Type_XXX
File Type Value 1229
Parent Type SQLite None
Carve Yes
Format Details Yes
Carve Meta Data Yes
MIME Type application/octet-stream
Filename Extension jpg

JPEG with EXIF

Description

File description

Truxton Exploiters

This file type is handled by the following ETLs:

Items Produced

Truxton will extract the following from this file type:

Carve Meta Data

When Truxton carves this file, it can populate the following columns in the [File] table:

  • Created - When the file was created
  • Name - The name of the file

Filenames Seen

  • name 1
  • name 2

Details