Difference between revisions of "Entity Types"

From truxwiki.com
Jump to navigation Jump to search
 
(20 intermediate revisions by the same user not shown)
Line 21: Line 21:
 
| style="text-align:center;" | 2
 
| style="text-align:center;" | 2
 
| A credit card number
 
| A credit card number
 +
| <code>4377-4378-6799-3241</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_EMAIL_ADDRESS</code>
 
| <code>ENTITY_TYPE_EMAIL_ADDRESS</code>
 
| style="text-align:center;" | 3
 
| style="text-align:center;" | 3
 
| An Email Address
 
| An Email Address
 +
| <code>john@doe.com</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_MAC_ADDRESS</code>
 
| <code>ENTITY_TYPE_MAC_ADDRESS</code>
Line 81: Line 83:
 
| style="text-align:center;" | 15
 
| style="text-align:center;" | 15
 
| YouTube Video ID
 
| YouTube Video ID
 +
| <code>lbM1bW7GiuQ</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER</code>
 
| <code>ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER</code>
Line 94: Line 97:
 
| style="text-align:center;" | 18
 
| style="text-align:center;" | 18
 
| A Dell Computer Service Tag
 
| A Dell Computer Service Tag
 +
| <code>BYSPG32</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_APPLE_UDID</code>
 
| <code>ENTITY_TYPE_APPLE_UDID</code>
 
| style="text-align:center;" | 19
 
| style="text-align:center;" | 19
 
| An Apple [https://en.wikipedia.org/wiki/UDID Unique Device ID] (UDID)
 
| An Apple [https://en.wikipedia.org/wiki/UDID Unique Device ID] (UDID)
 +
| <code>00008101-001875081AF4003B</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_FILE_PATH</code>
 
| <code>ENTITY_TYPE_FILE_PATH</code>
Line 106: Line 111:
 
| style="text-align:center;" | 21
 
| style="text-align:center;" | 21
 
| A serial number assigned to a logical volume by the operating system
 
| A serial number assigned to a logical volume by the operating system
 +
| <code>D8CE759A</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_VOLUME_NAME</code>
 
| <code>ENTITY_TYPE_VOLUME_NAME</code>
 
| style="text-align:center;" | 22
 
| style="text-align:center;" | 22
 
| The name of a volume in a file system
 
| The name of a volume in a file system
 +
| <code>SAMS WORK</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_MACHINE_NAME</code>
 
| <code>ENTITY_TYPE_MACHINE_NAME</code>
Line 134: Line 141:
 
| style="text-align:center;" | 27
 
| style="text-align:center;" | 27
 
| A USB device
 
| A USB device
 +
| <code>USB VID 2008 PID 2018</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_SHARE_NAME</code>
 
| <code>ENTITY_TYPE_SHARE_NAME</code>
Line 146: Line 154:
 
| style="text-align:center;" | 30
 
| style="text-align:center;" | 30
 
| A Windows product license key
 
| A Windows product license key
 +
| <code>DHR69-3H8RP-QXQXS-CB3BM-HT7XW</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_GOOGLE_PLUS_ID</code>
 
| <code>ENTITY_TYPE_GOOGLE_PLUS_ID</code>
Line 159: Line 168:
 
| style="text-align:center;" | 33
 
| style="text-align:center;" | 33
 
| A [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] assigned to a machine by Microsoft
 
| A [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] assigned to a machine by Microsoft
 +
| <code>aecfbeea-dc8a-4a56-8155-38266cbb5427</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_STEAM_ACCOUNT_ID</code>
 
| <code>ENTITY_TYPE_STEAM_ACCOUNT_ID</code>
Line 179: Line 189:
 
| style="text-align:center;" | 38
 
| style="text-align:center;" | 38
 
| A [https://en.wikipedia.org/wiki/NT_LAN_Manager hash] of a Windows NT logon password
 
| A [https://en.wikipedia.org/wiki/NT_LAN_Manager hash] of a Windows NT logon password
 +
| <code>209c6174da490caeb422f3fa5a7ae634</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_AUTHOR</code>
 
| <code>ENTITY_TYPE_AUTHOR</code>
Line 205: Line 216:
 
| style="text-align:center;" | 44
 
| style="text-align:center;" | 44
 
| A Snapchat account identifier
 
| A Snapchat account identifier
 +
| <code>18746dd0-ca88-4d15-be29-f14ffb9c0f77</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_TWITTER_ACCOUNT_ID</code>
 
| <code>ENTITY_TYPE_TWITTER_ACCOUNT_ID</code>
Line 230: Line 242:
 
| style="text-align:center;" | 50
 
| style="text-align:center;" | 50
 
| A 32-bit Master Boot Record [https://en.wikipedia.org/wiki/Master_boot_record#Sector_layout identifier] at offset 440 of the sector
 
| A 32-bit Master Boot Record [https://en.wikipedia.org/wiki/Master_boot_record#Sector_layout identifier] at offset 440 of the sector
 +
| <code>1619F01B</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_AES_128_KEY</code>
 
| <code>ENTITY_TYPE_AES_128_KEY</code>
Line 242: Line 255:
 
| style="text-align:center;" | 53
 
| style="text-align:center;" | 53
 
| A 256-bit [https://en.wikipedia.org/wiki/Advanced_Encryption_Standard AES] encryption key
 
| A 256-bit [https://en.wikipedia.org/wiki/Advanced_Encryption_Standard AES] encryption key
 +
| <code>000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_WICKR_ACCOUNT_ID</code>
 
| <code>ENTITY_TYPE_WICKR_ACCOUNT_ID</code>
Line 250: Line 264:
 
| style="text-align:center;" | 55
 
| style="text-align:center;" | 55
 
| An Apple [https://www.theiphonewiki.com/wiki/DSID Directory Service Identifier]
 
| An Apple [https://www.theiphonewiki.com/wiki/DSID Directory Service Identifier]
 +
| <code>20458579045</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_MEID</code>
 
| <code>ENTITY_TYPE_MEID</code>
 
| style="text-align:center;" | 56
 
| style="text-align:center;" | 56
 
| A [https://en.wikipedia.org/wiki/Mobile_equipment_identifier Mobile Equipment Identifier] (MEID)
 
| A [https://en.wikipedia.org/wiki/Mobile_equipment_identifier Mobile Equipment Identifier] (MEID)
 +
| <code>35945868287319</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_ACCOUNT_PROVIDER</code>
 
| <code>ENTITY_TYPE_ACCOUNT_PROVIDER</code>
Line 267: Line 283:
 
| style="text-align:center;" | 59
 
| style="text-align:center;" | 59
 
| An AirDrop ID
 
| An AirDrop ID
 +
| <code>8e6b4a761f3f</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_BLUETOOTH_LINK_KEY</code>
 
| <code>ENTITY_TYPE_BLUETOOTH_LINK_KEY</code>
Line 275: Line 292:
 
| style="text-align:center;" | 61
 
| style="text-align:center;" | 61
 
| A LinkedIn account
 
| A LinkedIn account
 +
| <code>john-littlejohnl-a99135237</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_VIN</code>
 
| <code>ENTITY_TYPE_VIN</code>
Line 287: Line 305:
 
| style="text-align:center;" | 64
 
| style="text-align:center;" | 64
 
| Apple advertising identifier
 
| Apple advertising identifier
 +
| <code>ED85A326-29E4-4D8C-9343-593B87A5C1EE</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_INSTAGRAM_ACCOUNT</code>
 
| <code>ENTITY_TYPE_INSTAGRAM_ACCOUNT</code>
Line 299: Line 318:
 
| style="text-align:center;" | 67
 
| style="text-align:center;" | 67
 
| Skype account
 
| Skype account
 +
| <code>jimsunny_1</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_DEVICE_ID</code>
 
| <code>ENTITY_TYPE_DEVICE_ID</code>
Line 312: Line 332:
 
| style="text-align:center;" | 70
 
| style="text-align:center;" | 70
 
| The Salt used in [https://github.com/ElDavoo/wa-crypt-tools/blob/main/proto/C14_cipher.proto crypt14] WhatsApp encryption
 
| The Salt used in [https://github.com/ElDavoo/wa-crypt-tools/blob/main/proto/C14_cipher.proto crypt14] WhatsApp encryption
 +
| <code>f0892622178268c7f8d94094c3bc81075f069524d7958efe02aecd4f22659e0a</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_DRIVERS_LICENSE_NUMBER</code>
 
| <code>ENTITY_TYPE_DRIVERS_LICENSE_NUMBER</code>
Line 324: Line 345:
 
| style="text-align:center;" | 73
 
| style="text-align:center;" | 73
 
| A [https://en.wikipedia.org/wiki/Social_Security_number social security number]
 
| A [https://en.wikipedia.org/wiki/Social_Security_number social security number]
 +
| <code>233-55-7808</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_LICENSE_PLATE</code>
 
| <code>ENTITY_TYPE_LICENSE_PLATE</code>
Line 332: Line 354:
 
| style="text-align:center;" | 75
 
| style="text-align:center;" | 75
 
| A [https://www.zetetic.net/sqlcipher/sqlcipher-api/ SQLCipher] crypto key usually carved from [https://cellebrite.com/en/decrypting-databases-using-ram-dump-health-data/ memory]
 
| A [https://www.zetetic.net/sqlcipher/sqlcipher-api/ SQLCipher] crypto key usually carved from [https://cellebrite.com/en/decrypting-databases-using-ram-dump-health-data/ memory]
 +
| <code>Dc</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_WAID</code>
 
| <code>ENTITY_TYPE_WAID</code>
 
| style="text-align:center;" | 76
 
| style="text-align:center;" | 76
 
| An [https://support.microsoft.com/en-us/windows/privacy-settings-for-recommendations-offers-in-windows-11-807608ee-3de2-4498-8e7c-eb10d655567f identifier] used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long.
 
| An [https://support.microsoft.com/en-us/windows/privacy-settings-for-recommendations-offers-in-windows-11-807608ee-3de2-4498-8e7c-eb10d655567f identifier] used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long.
 +
| <code>67f9d9554302a683f01504bce16fa9fb</code>
 
|-
 
|-
 
| <code>ENTITY_TYPE_DISCORD_ACCOUNT_ID</code>
 
| <code>ENTITY_TYPE_DISCORD_ACCOUNT_ID</code>
Line 360: Line 384:
 
| style="text-align:center;" | 82
 
| style="text-align:center;" | 82
 
| A Waze account identifier.
 
| A Waze account identifier.
 +
|-
 +
| <code>ENTITY_TYPE_BITCOIN</code>
 +
| style="text-align:center;" | 83
 +
| A Bitcoin address.
 +
| 17VZNX1SN5NtKa8UQFxwQbFeFc3iqRYhem
 +
|-
 +
| <code>ENTITY_TYPE_BITCOIN_SEED</code>
 +
| style="text-align:center;" | 84
 +
| A Bitcoin seed phrase.
 +
| ozone drill grab fiber curtain grace pudding thank cruise elder eight picnic
 +
|-
 +
| <code>ENTITY_TYPE_GOOGLE_ANALYTICS_ID</code>
 +
| style="text-align:center;" | 85
 +
| A Google analytics ID.
 +
| <code>UA-39296006-23</code>
 +
|-
 +
| <code>ENTITY_TYPE_TIKTOK_ACCOUNT_ID</code>
 +
| style="text-align:center;" | 86
 +
| A TikTok account ID.
 +
| <code>7573833892051993644</code>
 +
|-
 +
| <code>ENTITY_TYPE_GDID</code>
 +
| style="text-align:center;" | 87
 +
| Windows Global Device ID.
 +
| <code>00188012F4614071</code>
 +
|-
 +
| <code>ENTITY_TYPE_PUID</code>
 +
| style="text-align:center;" | 88
 +
| Windows Account Passport Unique ID.
 +
| <code>00037FFE83F764F9</code>
 +
|-
 +
| <code>ENTITY_TYPE_CID</code>
 +
| style="text-align:center;" | 89
 +
| Microsoft Consumer ID.
 +
| <code>082fe674d712d5bb</code>
 +
|-
 +
| <code>ENTITY_TYPE_MUID</code>
 +
| style="text-align:center;" | 90
 +
| Microsoft User ID.
 +
| <code>2C2453E7D0B6640D4D5B5D31D15B65FF</code>
 
|}
 
|}

Latest revision as of 07:33, 11 July 2026

This is an enumeration of the interesting tidbits of analytic value.

This information is also kept in the [EntityType] database table.

Name Value Meaning Sample
ENTITY_TYPE_UNKNOWN 0 The type of entity is not known
ENTITY_TYPE_ACCOUNT 1 Any form of account identifier O2web
ENTITY_TYPE_CREDIT_CARD_NUMBER 2 A credit card number 4377-4378-6799-3241
ENTITY_TYPE_EMAIL_ADDRESS 3 An Email Address john@doe.com
ENTITY_TYPE_MAC_ADDRESS 4 A 40-bit MAC address of a network card. vendor lookup 221A828E66A5
ENTITY_TYPE_PERSON 5 The name of a person John Doe
ENTITY_TYPE_PHONE_NUMBER 6 A phone number 2025551212
ENTITY_TYPE_SEARCH_TERM 7 Something the user searched for cool wallpapers
ENTITY_TYPE_TRACKING_NUMBER 8 A package tracking number
ENTITY_TYPE_SERIAL_NUMBER 9 A serial number R5CR105S4QF
ENTITY_TYPE_IMEI 10 International Mobile Equipment Identity (IMEI) 352859302198575
ENTITY_TYPE_IMSI 11 International Mobile Subscriber Identity (IMSI) 310410973162939
ENTITY_TYPE_TMSI 12 Temporary Mobile Subscriber Identity (TMSI)
ENTITY_TYPE_ICCID 13 Integrated Circuit Card ID or SIM card serial number (ICCID) 89014103279131609377
ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE 14 Spooled Document Title
ENTITY_TYPE_YOUTUBE_VIDEO_ID 15 YouTube Video ID lbM1bW7GiuQ
ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER 16 Facebook Account Number 100073561484450
ENTITY_TYPE_AIRLINE_RESERVATION 17 Airline Reservation
ENTITY_TYPE_DELL_SERVICE_TAG 18 A Dell Computer Service Tag BYSPG32
ENTITY_TYPE_APPLE_UDID 19 An Apple Unique Device ID (UDID) 00008101-001875081AF4003B
ENTITY_TYPE_FILE_PATH 20 A file path
ENTITY_TYPE_VOLUME_SERIAL_NUMBER 21 A serial number assigned to a logical volume by the operating system D8CE759A
ENTITY_TYPE_VOLUME_NAME 22 The name of a volume in a file system SAMS WORK
ENTITY_TYPE_MACHINE_NAME 23 The name of a computer or device John's Galaxy S20 5G
ENTITY_TYPE_ANDROID_ADVERTISING_ID 24 The identifier assigned to Android devices for advertising 687bd36c-3063-c53b-e944-37fb00001c8f
ENTITY_TYPE_SSID 25 The WiFi Service Set ID (SSID) or network name ASUS_Guest1
ENTITY_TYPE_PASSWORD 26 A password P@ssw0rd123!
ENTITY_TYPE_USB_DEVICE 27 A USB device USB VID 2008 PID 2018
ENTITY_TYPE_SHARE_NAME 28 A windows file share name
ENTITY_TYPE_LIMEWIRE_CLIENT_ID 29 A LimeWire Client Identifier
ENTITY_TYPE_PRODUCT_KEY 30 A Windows product license key DHR69-3H8RP-QXQXS-CB3BM-HT7XW
ENTITY_TYPE_GOOGLE_PLUS_ID 31 A Google Plus Profile ID 116104691595884789451
ENTITY_TYPE_DISNEY_GUEST_ID 32 An identifier of a guest at Disney
ENTITY_TYPE_MACHINE_GUID 33 A GUID assigned to a machine by Microsoft aecfbeea-dc8a-4a56-8155-38266cbb5427
ENTITY_TYPE_STEAM_ACCOUNT_ID 34 A Steam game network account identifier
ENTITY_TYPE_STEAM_PERSONA 35 A persona on the Steam game network
ENTITY_TYPE_STEAM_NAME 36 A name used in a Steam game
ENTITY_TYPE_TOR_HIDDEN_SERVICE 37 An identifier of a Tor Hidden Service
ENTITY_TYPE_NT_PASSWORD_HASH 38 A hash of a Windows NT logon password 209c6174da490caeb422f3fa5a7ae634
ENTITY_TYPE_AUTHOR 39 The author of a document Administrator
ENTITY_TYPE_OGG_SERIAL_NUMBER 40 The data stream serial number in an Ogg multimedia file
ENTITY_TYPE_CRYPTO_KEY_ID 41 The identifier of a cryptographic key
ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER 42 The account number of a WhatsApp user 15014650535
ENTITY_TYPE_BITLOCKER_RECOVERY_KEY 43 A recovery key for a BitLocker encrypted volume
ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID 44 A Snapchat account identifier 18746dd0-ca88-4d15-be29-f14ffb9c0f77
ENTITY_TYPE_TWITTER_ACCOUNT_ID 45 A Twitter account identifier 1448294400921116666
ENTITY_TYPE_APPLE_AUTHENTICATION_ID 46 An Apple authentication identifier
ENTITY_TYPE_KIK_ACCOUNT_ID 47 A Kik Account identifier
ENTITY_TYPE_VIBER_ID 48 A Viber identifier
ENTITY_TYPE_VIBER_MEMBER_ID 49 A Viber Member identifier
ENTITY_TYPE_DISK_SIGNATURE 50 A 32-bit Master Boot Record identifier at offset 440 of the sector 1619F01B
ENTITY_TYPE_AES_128_KEY 51 A 128-bit AES encryption key
ENTITY_TYPE_AES_192_KEY 52 A 192-bit AES encryption key
ENTITY_TYPE_AES_256_KEY 53 A 256-bit AES encryption key 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
ENTITY_TYPE_WICKR_ACCOUNT_ID 54 A WICKR account identifier
ENTITY_TYPE_APPLE_DSID 55 An Apple Directory Service Identifier 20458579045
ENTITY_TYPE_MEID 56 A Mobile Equipment Identifier (MEID) 35945868287319
ENTITY_TYPE_ACCOUNT_PROVIDER 57 A source for accounts. This can be a website, business, etc.
ENTITY_TYPE_DEVICE_NAME 58 The name of a device. This can be automatically assigned or set by a human. John Smallberries' S21
ENTITY_TYPE_AIRDROP_ID 59 An AirDrop ID 8e6b4a761f3f
ENTITY_TYPE_BLUETOOTH_LINK_KEY 60 Bluetooth Link Key
ENTITY_TYPE_LINKEDIN_ACCOUNT 61 A LinkedIn account john-littlejohnl-a99135237
ENTITY_TYPE_VIN 62 A vehicle identification number (VIN)
ENTITY_TYPE_TELEGRAM_ACCOUNT 63 A Telegram account
ENTITY_TYPE_APPLE_ADVERTISING_ID 64 Apple advertising identifier ED85A326-29E4-4D8C-9343-593B87A5C1EE
ENTITY_TYPE_INSTAGRAM_ACCOUNT 65 Instagram account
ENTITY_TYPE_TEXT_NOW_ACCOUNT 66 TextNow account
ENTITY_TYPE_SKYPE_ACCOUNT 67 Skype account jimsunny_1
ENTITY_TYPE_DEVICE_ID 68 An identifier for a device 0afc69e58bfc3a73
ENTITY_TYPE_GROUP 69 A logical group such as a company, organization, gang, team, etc.
ENTITY_TYPE_CRYPT14_SALT 70 The Salt used in crypt14 WhatsApp encryption f0892622178268c7f8d94094c3bc81075f069524d7958efe02aecd4f22659e0a
ENTITY_TYPE_DRIVERS_LICENSE_NUMBER 71 A driver's license number
ENTITY_TYPE_PASSPORT_NUMBER 72 A passport number
ENTITY_TYPE_SOCIAL_SECURITY_NUMBER 73 A social security number 233-55-7808
ENTITY_TYPE_LICENSE_PLATE 74 A vehicle license plate number
ENTITY_TYPE_SQLCIPHER_KEY 75 A SQLCipher crypto key usually carved from memory Dc
ENTITY_TYPE_WAID 76 An identifier used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long. 67f9d9554302a683f01504bce16fa9fb
ENTITY_TYPE_DISCORD_ACCOUNT_ID 77 A Discord account identifier
ENTITY_TYPE_REDDIT_ACCOUNT_ID 78 A Reddit account identifier
ENTITY_TYPE_AI_PROMPT 79 An AI Prompt. Basically a user's query to Google Gemini, ChatGPT, etc.
ENTITY_TYPE_TINDER_ACCOUNT_ID 80 A Tinder account identifier.
ENTITY_TYPE_UBER_ACCOUNT_ID 81 An Uber account identifier.
ENTITY_TYPE_WAZE_ACCOUNT_ID 82 A Waze account identifier.
ENTITY_TYPE_BITCOIN 83 A Bitcoin address. 17VZNX1SN5NtKa8UQFxwQbFeFc3iqRYhem
ENTITY_TYPE_BITCOIN_SEED 84 A Bitcoin seed phrase. ozone drill grab fiber curtain grace pudding thank cruise elder eight picnic
ENTITY_TYPE_GOOGLE_ANALYTICS_ID 85 A Google analytics ID. UA-39296006-23
ENTITY_TYPE_TIKTOK_ACCOUNT_ID 86 A TikTok account ID. 7573833892051993644
ENTITY_TYPE_GDID 87 Windows Global Device ID. 00188012F4614071
ENTITY_TYPE_PUID 88 Windows Account Passport Unique ID. 00037FFE83F764F9
ENTITY_TYPE_CID 89 Microsoft Consumer ID. 082fe674d712d5bb
ENTITY_TYPE_MUID 90 Microsoft User ID. 2C2453E7D0B6640D4D5B5D31D15B65FF