Difference between revisions of "Truxton URL Interface"

From truxwiki.com
Jump to navigation Jump to search
(Created page with "Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific...")
 
 
(5 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
Truxton installs a protocol handler fot the "truxton:" protocol on Windows machines.
+
Truxton installs a protocol handler for the "truxton:" protocol on Windows machines.
 
This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.
 
This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.
  
Line 14: Line 14:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.
 +
</source>
  
 
=Camera=
 
=Camera=
Line 27: Line 32:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.
 +
</source>
  
 
=Event=
 
=Event=
Line 38: Line 48:
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the event.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
 +
</source>
  
 
=File=
 
=File=
Line 51: Line 66:
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the file.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.
 +
</source>
  
 
=Hash=
 
=Hash=
−
You can link directly to a specific file view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://hash/{GUID}  
+
truxton://hash/{GUID}
 
</pre>
 
</pre>
  
Line 65: Line 85:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
An MD5 or SHA1 hash.
 
An MD5 or SHA1 hash.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Investigation=
 
=Investigation=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific investigation in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://investigation/{GUID}  
+
truxton://investigation/{GUID}
 
</pre>
 
</pre>
  
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the investigation.
 
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.
 
This corresponds to the <code>[ID]</code> column of the <code>[Investigation]</code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Location=
 
=Location=
Line 91: Line 121:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the location.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Location Table|Location]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.
 +
</source>
  
 
=md5=
 
=md5=
−
You can link directly to a specific file view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
Line 103: Line 138:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
An MD5 hash.
 
An MD5 hash.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.
 +
</source>
  
 
=Media=
 
=Media=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific media view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://media/{GUID}  
+
truxton://media/{GUID}
 
</pre>
 
</pre>
  
Line 115: Line 155:
 
===<code>GUID</code>===
 
===<code>GUID</code>===
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
−
This corresponds to the <code>[ID]</code> column of the <code>[Media]</code> table.
+
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table.
 +
 
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://media/33f9ab81-e581-8299-2338-3889e8314e09">here</a> to see the media in Truxton.
 +
</source>
  
 
=Message=
 
=Message=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific message view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://message/{GUID}  
+
truxton://message/{GUID}
 
</pre>
 
</pre>
  
Line 129: Line 174:
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
 
This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.
 
This corresponds to the <code>[ID]</code> column of the <code>[Message]</code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://message/69394b56-7957-a1c6-7aa2-6743000001c7">here</a> to see the message in Truxton.
 +
</source>
  
 
=sha1=
 
=sha1=
−
You can link directly to a specific investigation view in Truxton.
+
You can link directly to a specific hash view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://sha1/{hash}  
+
truxton://sha1/{hash}
 
</pre>
 
</pre>
  
Line 141: Line 191:
 
===<code>hash</code>===
 
===<code>hash</code>===
 
The SHA1 hash value
 
The SHA1 hash value
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://sha1/2d2b30f8dceeb6d76be8292975e18a8c621e596e">here</a> to see the hash in Truxton.
 +
</source>
  
 
=tutorial=
 
=tutorial=
Line 150: Line 205:
 
</pre>
 
</pre>
  
−
==Parameters==
+
==Sample==
−
===<code>GUID</code>===
+
<source lang="HTML">
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+
Click <a href="truxton://tutorial">here</a> to run the Truxton tutorial.
 +
</source>
  
 
=Website=
 
=Website=
−
You can link directly to a specific website visitview in Truxton.
+
You can link directly to a specific website visit view in Truxton.
  
 
==Syntax==
 
==Syntax==
 
<pre>
 
<pre>
−
truxton://website/{GUID}  
+
truxton://website/{GUID}
 
</pre>
 
</pre>
  
 
==Parameters==
 
==Parameters==
 
===<code>GUID</code>===
 
===<code>GUID</code>===
−
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the media.
+
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the website.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.
 
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[WebsiteVisit Table|WebsiteVisit]]<nowiki>]</nowiki></code> table.
 +
 +
==Sample==
 +
<source lang="HTML">
 +
Click <a href="truxton://website/69394b56-7957-a1c6-7aa2-674300004a48">here</a> to see the website in Truxton.
 +
</source>

Latest revision as of 05:52, 11 December 2025

Truxton installs a protocol handler for the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.

Artifact

You can link directly to a specific artifact in Truxton.

Syntax

truxton://artifact/{GUID}

Parameters

GUID

The GUID of the artifact. This corresponds to the [ID] column of the [Entity] table.

Sample

Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.

Camera

You can link directly to a specific camera information view in Truxton.

Syntax

truxton://camera/{GUID}

Parameters

GUID

The GUID of the camera information. This corresponds to the [ID] column of the [EXIF] table.

Sample

Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.

Event

You can link directly to a specific event view in Truxton.

Syntax

truxton://event/{GUID}

Parameters

GUID

The GUID of the event. This corresponds to the [ID] column of the [Event] table.

Sample

Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.

File

You can link directly to a specific file view in Truxton.

Syntax

truxton://file/{GUID}

Parameters

GUID

The GUID of the file. This corresponds to the [ID] column of the [File] table.

Sample

Click <a href="truxton://file/69394b56-7957-a1c6-7aa2-6743000046e5">here</a> to see the file in Truxton.

Hash

You can link directly to a specific hash view in Truxton.

Syntax

truxton://hash/{GUID}

Parameters

hash

An MD5 or SHA1 hash.

Sample

Click <a href="truxton://hash/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.

Investigation

You can link directly to a specific investigation in Truxton.

Syntax

truxton://investigation/{GUID}

Parameters

GUID

The GUID of the investigation. This corresponds to the [ID] column of the [Investigation] table.

Sample

Click <a href="truxton://investigation/01dc69bf-bfb5-1d61-0000-0155349ee426">here</a> to see the hash in Truxton.

Location

You can link directly to a specific location view in Truxton.

Syntax

truxton://location/{GUID}

Parameters

GUID

The GUID of the location. This corresponds to the [ID] column of the [Location] table.

Sample

Click <a href="truxton://location/69394b56-7957-a1c6-7aa2-67430000011c">here</a> to see the location in Truxton.

md5

You can link directly to a specific hash view in Truxton.

Syntax

truxton://md5/{hash}

Parameters

hash

An MD5 hash.

Sample

Click <a href="truxton://md5/04f1365587e6869c00f0b1d9742ddcce">here</a> to see the hash in Truxton.

Media

You can link directly to a specific media view in Truxton.

Syntax

truxton://media/{GUID}

Parameters

GUID

The GUID of the media. This corresponds to the [ID] column of the [Media] table.

Sample

Click <a href="truxton://media/33f9ab81-e581-8299-2338-3889e8314e09">here</a> to see the media in Truxton.

Message

You can link directly to a specific message view in Truxton.

Syntax

truxton://message/{GUID}

Parameters

GUID

The GUID of the media. This corresponds to the [ID] column of the [Message] table.

Sample

Click <a href="truxton://message/69394b56-7957-a1c6-7aa2-6743000001c7">here</a> to see the message in Truxton.

sha1

You can link directly to a specific hash view in Truxton.

Syntax

truxton://sha1/{hash}

Parameters

hash

The SHA1 hash value

Sample

Click <a href="truxton://sha1/2d2b30f8dceeb6d76be8292975e18a8c621e596e">here</a> to see the hash in Truxton.

tutorial

Re-display the initial desktop tutorial

Syntax

truxton://tutorial

Sample

Click <a href="truxton://tutorial">here</a> to run the Truxton tutorial.

Website

You can link directly to a specific website visit view in Truxton.

Syntax

truxton://website/{GUID}

Parameters

GUID

The GUID of the website. This corresponds to the [ID] column of the [WebsiteVisit] table.

Sample

Click <a href="truxton://website/69394b56-7957-a1c6-7aa2-674300004a48">here</a> to see the website in Truxton.
Retrieved from "https://truxwiki.com/index.php?title=Truxton_URL_Interface&oldid=10680"