Difference between revisions of "Entity Types"
Jump to navigation
Jump to search
| (43 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
This is an enumeration of the interesting tidbits of analytic value. | This is an enumeration of the interesting tidbits of analytic value. | ||
| − | This information is also kept in the <code>[EntityType]</code> database table. | + | This information is also kept in the <code>[EntityType]</code> [[Database Tables|database table]]. |
{| class="wikitable" | {| class="wikitable" | ||
| Line 7: | Line 7: | ||
! Value | ! Value | ||
! Meaning | ! Meaning | ||
| + | ! Sample | ||
|- | |- | ||
| <code>ENTITY_TYPE_UNKNOWN</code> | | <code>ENTITY_TYPE_UNKNOWN</code> | ||
| style="text-align:center;" | 0 | | style="text-align:center;" | 0 | ||
| − | | The type of entity is not known | + | | The type of entity is not known |
|- | |- | ||
| <code>ENTITY_TYPE_ACCOUNT</code> | | <code>ENTITY_TYPE_ACCOUNT</code> | ||
| style="text-align:center;" | 1 | | style="text-align:center;" | 1 | ||
| − | | Any form of account identifier | + | | Any form of account identifier |
| + | | <code>O2web</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_CREDIT_CARD_NUMBER</code> | | <code>ENTITY_TYPE_CREDIT_CARD_NUMBER</code> | ||
| style="text-align:center;" | 2 | | style="text-align:center;" | 2 | ||
| − | | A credit card number | + | | A credit card number |
| + | | <code>4377-4378-6799-3241</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_EMAIL_ADDRESS</code> | | <code>ENTITY_TYPE_EMAIL_ADDRESS</code> | ||
| style="text-align:center;" | 3 | | style="text-align:center;" | 3 | ||
| − | | An Email Address. | + | | An Email Address |
| + | | <code>john@doe.com</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_MAC_ADDRESS</code> | | <code>ENTITY_TYPE_MAC_ADDRESS</code> | ||
| style="text-align:center;" | 4 | | style="text-align:center;" | 4 | ||
| A 40-bit [https://en.wikipedia.org/wiki/MAC_address MAC address] of a network card. [https://standards.ieee.org/products-services/regauth/index.html vendor lookup] | | A 40-bit [https://en.wikipedia.org/wiki/MAC_address MAC address] of a network card. [https://standards.ieee.org/products-services/regauth/index.html vendor lookup] | ||
| + | | <code>221A828E66A5</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PERSON</code> | | <code>ENTITY_TYPE_PERSON</code> | ||
| style="text-align:center;" | 5 | | style="text-align:center;" | 5 | ||
| − | | The name of a person | + | | The name of a person |
| + | | <code>John Doe</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PHONE_NUMBER</code> | | <code>ENTITY_TYPE_PHONE_NUMBER</code> | ||
| style="text-align:center;" | 6 | | style="text-align:center;" | 6 | ||
| − | | A phone number | + | | A phone number |
| + | | <code>2025551212<code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SEARCH_TERM</code> | | <code>ENTITY_TYPE_SEARCH_TERM</code> | ||
| style="text-align:center;" | 7 | | style="text-align:center;" | 7 | ||
| − | | Something the user searched for | + | | Something the user searched for |
| + | | <code>cool wallpapers</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_TRACKING_NUMBER</code> | | <code>ENTITY_TYPE_TRACKING_NUMBER</code> | ||
| style="text-align:center;" | 8 | | style="text-align:center;" | 8 | ||
| − | | A package tracking number | + | | A package tracking number |
|- | |- | ||
| <code>ENTITY_TYPE_SERIAL_NUMBER</code> | | <code>ENTITY_TYPE_SERIAL_NUMBER</code> | ||
| style="text-align:center;" | 9 | | style="text-align:center;" | 9 | ||
| − | | A serial number | + | | A serial number |
| + | | <code>R5CR105S4QF</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_IMEI</code> | | <code>ENTITY_TYPE_IMEI</code> | ||
| style="text-align:center;" | 10 | | style="text-align:center;" | 10 | ||
| − | | [https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity International Mobile Equipment Identity | + | | [https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity International Mobile Equipment Identity] (IMEI) |
| + | | <code>352859302198575</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_IMSI</code> | | <code>ENTITY_TYPE_IMSI</code> | ||
| style="text-align:center;" | 11 | | style="text-align:center;" | 11 | ||
| − | | [https://en.wikipedia.org/wiki/International_mobile_subscriber_identity International Mobile Subscriber Identity | + | | [https://en.wikipedia.org/wiki/International_mobile_subscriber_identity International Mobile Subscriber Identity] (IMSI) |
| + | | <code>310410973162939</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_TMSI</code> | | <code>ENTITY_TYPE_TMSI</code> | ||
| style="text-align:center;" | 12 | | style="text-align:center;" | 12 | ||
| − | | [https://en.wikipedia.org/wiki/Mobility_management#TMSI Temporary Mobile Subscriber Identity | + | | [https://en.wikipedia.org/wiki/Mobility_management#TMSI Temporary Mobile Subscriber Identity] (TMSI) |
|- | |- | ||
| <code>ENTITY_TYPE_ICCID</code> | | <code>ENTITY_TYPE_ICCID</code> | ||
| style="text-align:center;" | 13 | | style="text-align:center;" | 13 | ||
| − | | [https://en.wikipedia.org/wiki/SIM_card#ICCID Integrated Circuit Card ID or SIM card serial number | + | | [https://en.wikipedia.org/wiki/SIM_card#ICCID Integrated Circuit Card ID or SIM card serial number] (ICCID) |
| + | | <code>89014103279131609377</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE</code> | | <code>ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE</code> | ||
| style="text-align:center;" | 14 | | style="text-align:center;" | 14 | ||
| − | | Spooled Document Title | + | | Spooled Document Title |
|- | |- | ||
| <code>ENTITY_TYPE_YOUTUBE_VIDEO_ID</code> | | <code>ENTITY_TYPE_YOUTUBE_VIDEO_ID</code> | ||
| style="text-align:center;" | 15 | | style="text-align:center;" | 15 | ||
| − | | YouTube Video ID | + | | YouTube Video ID |
| + | | <code>lbM1bW7GiuQ</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER</code> | | <code>ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER</code> | ||
| style="text-align:center;" | 16 | | style="text-align:center;" | 16 | ||
| − | | Facebook Account Number | + | | Facebook Account Number |
| + | | <code>100073561484450</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_AIRLINE_RESERVATION</code> | | <code>ENTITY_TYPE_AIRLINE_RESERVATION</code> | ||
| style="text-align:center;" | 17 | | style="text-align:center;" | 17 | ||
| − | | Airline Reservation | + | | Airline Reservation |
|- | |- | ||
| <code>ENTITY_TYPE_DELL_SERVICE_TAG</code> | | <code>ENTITY_TYPE_DELL_SERVICE_TAG</code> | ||
| style="text-align:center;" | 18 | | style="text-align:center;" | 18 | ||
| − | | A Dell Computer Service Tag | + | | A Dell Computer Service Tag |
| + | | <code>BYSPG32</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_APPLE_UDID</code> | | <code>ENTITY_TYPE_APPLE_UDID</code> | ||
| style="text-align:center;" | 19 | | style="text-align:center;" | 19 | ||
| − | | An Apple [https://en.wikipedia.org/wiki/UDID Unique Device ID | + | | An Apple [https://en.wikipedia.org/wiki/UDID Unique Device ID] (UDID) |
| + | | <code>00008101-001875081AF4003B</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_FILE_PATH</code> | | <code>ENTITY_TYPE_FILE_PATH</code> | ||
| style="text-align:center;" | 20 | | style="text-align:center;" | 20 | ||
| − | | A file path | + | | A file path |
|- | |- | ||
| <code>ENTITY_TYPE_VOLUME_SERIAL_NUMBER</code> | | <code>ENTITY_TYPE_VOLUME_SERIAL_NUMBER</code> | ||
| style="text-align:center;" | 21 | | style="text-align:center;" | 21 | ||
| − | | A serial number assigned to a logical volume by the operating system | + | | A serial number assigned to a logical volume by the operating system |
| + | | <code>D8CE759A</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_VOLUME_NAME</code> | | <code>ENTITY_TYPE_VOLUME_NAME</code> | ||
| style="text-align:center;" | 22 | | style="text-align:center;" | 22 | ||
| − | | The name of a volume in a file system | + | | The name of a volume in a file system |
| + | | <code>SAMS WORK</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_MACHINE_NAME</code> | | <code>ENTITY_TYPE_MACHINE_NAME</code> | ||
| style="text-align:center;" | 23 | | style="text-align:center;" | 23 | ||
| − | | The name of a computer or device | + | | The name of a computer or device |
| + | | <code>John's Galaxy S20 5G</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_ANDROID_ADVERTISING_ID</code> | | <code>ENTITY_TYPE_ANDROID_ADVERTISING_ID</code> | ||
| style="text-align:center;" | 24 | | style="text-align:center;" | 24 | ||
| − | | The identifier assigned to Android devices for [http://www.androiddocs.com/google/play-services/id.html advertising | + | | The identifier assigned to Android devices for [http://www.androiddocs.com/google/play-services/id.html advertising] |
| + | | <code>687bd36c-3063-c53b-e944-37fb00001c8f</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SSID</code> | | <code>ENTITY_TYPE_SSID</code> | ||
| style="text-align:center;" | 25 | | style="text-align:center;" | 25 | ||
| − | | The WiFi [https://en.wikipedia.org/wiki/Service_set_(802.11_network)#Service_set_identifier_(SSID) Service Set ID] or network name | + | | The WiFi [https://en.wikipedia.org/wiki/Service_set_(802.11_network)#Service_set_identifier_(SSID) Service Set ID] (SSID) or network name |
| + | | <code>ASUS_Guest1</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PASSWORD</code> | | <code>ENTITY_TYPE_PASSWORD</code> | ||
| style="text-align:center;" | 26 | | style="text-align:center;" | 26 | ||
| − | | A password | + | | A password |
| + | | <code>P@ssw0rd123!</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_USB_DEVICE</code> | | <code>ENTITY_TYPE_USB_DEVICE</code> | ||
| style="text-align:center;" | 27 | | style="text-align:center;" | 27 | ||
| − | | A USB device | + | | A USB device |
| + | | <code>USB VID 2008 PID 2018</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SHARE_NAME</code> | | <code>ENTITY_TYPE_SHARE_NAME</code> | ||
| style="text-align:center;" | 28 | | style="text-align:center;" | 28 | ||
| − | | A windows file share name | + | | A windows file share name |
|- | |- | ||
| <code>ENTITY_TYPE_LIMEWIRE_CLIENT_ID</code> | | <code>ENTITY_TYPE_LIMEWIRE_CLIENT_ID</code> | ||
| style="text-align:center;" | 29 | | style="text-align:center;" | 29 | ||
| − | | A LimeWire Client Identifier | + | | A LimeWire Client Identifier |
|- | |- | ||
| <code>ENTITY_TYPE_PRODUCT_KEY</code> | | <code>ENTITY_TYPE_PRODUCT_KEY</code> | ||
| style="text-align:center;" | 30 | | style="text-align:center;" | 30 | ||
| − | | A Windows product license key | + | | A Windows product license key |
| + | | <code>DHR69-3H8RP-QXQXS-CB3BM-HT7XW</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_GOOGLE_PLUS_ID</code> | | <code>ENTITY_TYPE_GOOGLE_PLUS_ID</code> | ||
| style="text-align:center;" | 31 | | style="text-align:center;" | 31 | ||
| − | | A Google Plus Profile ID | + | | A Google Plus Profile ID |
| + | | <code>116104691595884789451</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_DISNEY_GUEST_ID</code> | | <code>ENTITY_TYPE_DISNEY_GUEST_ID</code> | ||
| style="text-align:center;" | 32 | | style="text-align:center;" | 32 | ||
| − | | An identifier of a guest at Disney | + | | An identifier of a guest at Disney |
|- | |- | ||
| <code>ENTITY_TYPE_MACHINE_GUID</code> | | <code>ENTITY_TYPE_MACHINE_GUID</code> | ||
| style="text-align:center;" | 33 | | style="text-align:center;" | 33 | ||
| − | | A [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] assigned to a machine by Microsoft | + | | A [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] assigned to a machine by Microsoft |
| + | | <code>aecfbeea-dc8a-4a56-8155-38266cbb5427</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_STEAM_ACCOUNT_ID</code> | | <code>ENTITY_TYPE_STEAM_ACCOUNT_ID</code> | ||
| style="text-align:center;" | 34 | | style="text-align:center;" | 34 | ||
| − | | A Steam game network account identifier | + | | A Steam game network account identifier |
|- | |- | ||
| <code>ENTITY_TYPE_STEAM_PERSONA</code> | | <code>ENTITY_TYPE_STEAM_PERSONA</code> | ||
| style="text-align:center;" | 35 | | style="text-align:center;" | 35 | ||
| − | | A persona on the Steam game network | + | | A persona on the Steam game network |
|- | |- | ||
| <code>ENTITY_TYPE_STEAM_NAME</code> | | <code>ENTITY_TYPE_STEAM_NAME</code> | ||
| style="text-align:center;" | 36 | | style="text-align:center;" | 36 | ||
| − | | A name used in a Steam game | + | | A name used in a Steam game |
|- | |- | ||
| <code>ENTITY_TYPE_TOR_HIDDEN_SERVICE</code> | | <code>ENTITY_TYPE_TOR_HIDDEN_SERVICE</code> | ||
| style="text-align:center;" | 37 | | style="text-align:center;" | 37 | ||
| − | | An identifier of a [https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Onion_services Tor Hidden Service | + | | An identifier of a [https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Onion_services Tor Hidden Service] |
|- | |- | ||
| <code>ENTITY_TYPE_NT_PASSWORD_HASH</code> | | <code>ENTITY_TYPE_NT_PASSWORD_HASH</code> | ||
| style="text-align:center;" | 38 | | style="text-align:center;" | 38 | ||
| − | | A [https://en.wikipedia.org/wiki/NT_LAN_Manager hash] of a Windows NT logon password | + | | A [https://en.wikipedia.org/wiki/NT_LAN_Manager hash] of a Windows NT logon password |
| + | | <code>209c6174da490caeb422f3fa5a7ae634</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_AUTHOR</code> | | <code>ENTITY_TYPE_AUTHOR</code> | ||
| style="text-align:center;" | 39 | | style="text-align:center;" | 39 | ||
| − | | The author of a document | + | | The author of a document |
| + | | <code>Administrator</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_OGG_SERIAL_NUMBER</code> | | <code>ENTITY_TYPE_OGG_SERIAL_NUMBER</code> | ||
| style="text-align:center;" | 40 | | style="text-align:center;" | 40 | ||
| − | | The data stream serial number in an [https://en.wikipedia.org/wiki/Ogg#File_format Ogg] multimedia file | + | | The data stream serial number in an [https://en.wikipedia.org/wiki/Ogg#File_format Ogg] multimedia file |
|- | |- | ||
| <code>ENTITY_TYPE_CRYPTO_KEY_ID</code> | | <code>ENTITY_TYPE_CRYPTO_KEY_ID</code> | ||
| style="text-align:center;" | 41 | | style="text-align:center;" | 41 | ||
| − | | The identifier of a cryptographic key | + | | The identifier of a cryptographic key |
|- | |- | ||
| <code>ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER</code> | | <code>ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER</code> | ||
| style="text-align:center;" | 42 | | style="text-align:center;" | 42 | ||
| − | | The account number of a WhatsApp user | + | | The account number of a WhatsApp user |
| + | | <code>15014650535</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_BITLOCKER_RECOVERY_KEY</code> | | <code>ENTITY_TYPE_BITLOCKER_RECOVERY_KEY</code> | ||
| style="text-align:center;" | 43 | | style="text-align:center;" | 43 | ||
| − | | A recovery key for a BitLocker encrypted volume | + | | A recovery key for a BitLocker encrypted volume |
|- | |- | ||
| <code>ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID</code> | | <code>ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID</code> | ||
| style="text-align:center;" | 44 | | style="text-align:center;" | 44 | ||
| − | | A Snapchat account identifier | + | | A Snapchat account identifier |
| + | | <code>18746dd0-ca88-4d15-be29-f14ffb9c0f77</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_TWITTER_ACCOUNT_ID</code> | | <code>ENTITY_TYPE_TWITTER_ACCOUNT_ID</code> | ||
| style="text-align:center;" | 45 | | style="text-align:center;" | 45 | ||
| − | | A Twitter account identifier | + | | A Twitter account identifier |
| + | | <code>1448294400921116666</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_APPLE_AUTHENTICATION_ID</code> | | <code>ENTITY_TYPE_APPLE_AUTHENTICATION_ID</code> | ||
| style="text-align:center;" | 46 | | style="text-align:center;" | 46 | ||
| − | | An Apple authentication identifier | + | | An Apple authentication identifier |
|- | |- | ||
| <code>ENTITY_TYPE_KIK_ACCOUNT_ID</code> | | <code>ENTITY_TYPE_KIK_ACCOUNT_ID</code> | ||
| style="text-align:center;" | 47 | | style="text-align:center;" | 47 | ||
| − | | A Kik Account identifier | + | | A Kik Account identifier |
|- | |- | ||
| <code>ENTITY_TYPE_VIBER_ID</code> | | <code>ENTITY_TYPE_VIBER_ID</code> | ||
| style="text-align:center;" | 48 | | style="text-align:center;" | 48 | ||
| − | | A Viber identifier | + | | A Viber identifier |
|- | |- | ||
| <code>ENTITY_TYPE_VIBER_MEMBER_ID</code> | | <code>ENTITY_TYPE_VIBER_MEMBER_ID</code> | ||
| style="text-align:center;" | 49 | | style="text-align:center;" | 49 | ||
| − | | A Viber Member identifier | + | | A Viber Member identifier |
|- | |- | ||
| <code>ENTITY_TYPE_DISK_SIGNATURE</code> | | <code>ENTITY_TYPE_DISK_SIGNATURE</code> | ||
| style="text-align:center;" | 50 | | style="text-align:center;" | 50 | ||
| − | | A 32-bit Master Boot Record [https://en.wikipedia.org/wiki/Master_boot_record#Sector_layout identifier] at offset 440 of the sector | + | | A 32-bit Master Boot Record [https://en.wikipedia.org/wiki/Master_boot_record#Sector_layout identifier] at offset 440 of the sector |
| + | | <code>1619F01B</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_AES_128_KEY</code> | | <code>ENTITY_TYPE_AES_128_KEY</code> | ||
| Line 223: | Line 255: | ||
| style="text-align:center;" | 53 | | style="text-align:center;" | 53 | ||
| A 256-bit [https://en.wikipedia.org/wiki/Advanced_Encryption_Standard AES] encryption key | | A 256-bit [https://en.wikipedia.org/wiki/Advanced_Encryption_Standard AES] encryption key | ||
| + | | <code>000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_WICKR_ACCOUNT_ID</code> | | <code>ENTITY_TYPE_WICKR_ACCOUNT_ID</code> | ||
| Line 231: | Line 264: | ||
| style="text-align:center;" | 55 | | style="text-align:center;" | 55 | ||
| An Apple [https://www.theiphonewiki.com/wiki/DSID Directory Service Identifier] | | An Apple [https://www.theiphonewiki.com/wiki/DSID Directory Service Identifier] | ||
| + | | <code>20458579045</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_MEID</code> | | <code>ENTITY_TYPE_MEID</code> | ||
| style="text-align:center;" | 56 | | style="text-align:center;" | 56 | ||
| − | | A [https://en.wikipedia.org/wiki/Mobile_equipment_identifier Mobile Equipment Identifier] | + | | A [https://en.wikipedia.org/wiki/Mobile_equipment_identifier Mobile Equipment Identifier] (MEID) |
| + | | <code>35945868287319</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_ACCOUNT_PROVIDER</code> | | <code>ENTITY_TYPE_ACCOUNT_PROVIDER</code> | ||
| Line 243: | Line 278: | ||
| style="text-align:center;" | 58 | | style="text-align:center;" | 58 | ||
| The name of a device. This can be automatically assigned or set by a human. | | The name of a device. This can be automatically assigned or set by a human. | ||
| + | | <code>John Smallberries' S21</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_AIRDROP_ID</code> | | <code>ENTITY_TYPE_AIRDROP_ID</code> | ||
| style="text-align:center;" | 59 | | style="text-align:center;" | 59 | ||
| − | | An AirDrop ID | + | | An AirDrop ID |
| + | | <code>8e6b4a761f3f</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_BLUETOOTH_LINK_KEY</code> | | <code>ENTITY_TYPE_BLUETOOTH_LINK_KEY</code> | ||
| style="text-align:center;" | 60 | | style="text-align:center;" | 60 | ||
| − | | Bluetooth Link Key | + | | Bluetooth Link Key |
|- | |- | ||
| <code>ENTITY_TYPE_LINKEDIN_ACCOUNT</code> | | <code>ENTITY_TYPE_LINKEDIN_ACCOUNT</code> | ||
| style="text-align:center;" | 61 | | style="text-align:center;" | 61 | ||
| − | | A LinkedIn account | + | | A LinkedIn account |
| + | | <code>john-littlejohnl-a99135237</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_VIN</code> | | <code>ENTITY_TYPE_VIN</code> | ||
| style="text-align:center;" | 62 | | style="text-align:center;" | 62 | ||
| − | | A [https://en.wikipedia.org/wiki/Vehicle_identification_number vehicle identification number | + | | A [https://en.wikipedia.org/wiki/Vehicle_identification_number vehicle identification number] (VIN) |
|- | |- | ||
| <code>ENTITY_TYPE_TELEGRAM_ACCOUNT</code> | | <code>ENTITY_TYPE_TELEGRAM_ACCOUNT</code> | ||
| style="text-align:center;" | 63 | | style="text-align:center;" | 63 | ||
| − | | A Telegram account. | + | | A Telegram account |
| + | |- | ||
| + | | <code>ENTITY_TYPE_APPLE_ADVERTISING_ID</code> | ||
| + | | style="text-align:center;" | 64 | ||
| + | | Apple advertising identifier | ||
| + | | <code>ED85A326-29E4-4D8C-9343-593B87A5C1EE</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_INSTAGRAM_ACCOUNT</code> | ||
| + | | style="text-align:center;" | 65 | ||
| + | | Instagram account | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_TEXT_NOW_ACCOUNT</code> | ||
| + | | style="text-align:center;" | 66 | ||
| + | | TextNow account | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_SKYPE_ACCOUNT</code> | ||
| + | | style="text-align:center;" | 67 | ||
| + | | Skype account | ||
| + | | <code>jimsunny_1</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_DEVICE_ID</code> | ||
| + | | style="text-align:center;" | 68 | ||
| + | | An identifier for a device | ||
| + | | <code>0afc69e58bfc3a73</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_GROUP</code> | ||
| + | | style="text-align:center;" | 69 | ||
| + | | A logical group such as a company, organization, gang, team, etc. | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_CRYPT14_SALT</code> | ||
| + | | style="text-align:center;" | 70 | ||
| + | | The Salt used in [https://github.com/ElDavoo/wa-crypt-tools/blob/main/proto/C14_cipher.proto crypt14] WhatsApp encryption | ||
| + | | <code>f0892622178268c7f8d94094c3bc81075f069524d7958efe02aecd4f22659e0a</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_DRIVERS_LICENSE_NUMBER</code> | ||
| + | | style="text-align:center;" | 71 | ||
| + | | A driver's license number | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_PASSPORT_NUMBER</code> | ||
| + | | style="text-align:center;" | 72 | ||
| + | | A passport number | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_SOCIAL_SECURITY_NUMBER</code> | ||
| + | | style="text-align:center;" | 73 | ||
| + | | A [https://en.wikipedia.org/wiki/Social_Security_number social security number] | ||
| + | | <code>233-55-7808</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_LICENSE_PLATE</code> | ||
| + | | style="text-align:center;" | 74 | ||
| + | | A vehicle license plate number | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_SQLCIPHER_KEY</code> | ||
| + | | style="text-align:center;" | 75 | ||
| + | | A [https://www.zetetic.net/sqlcipher/sqlcipher-api/ SQLCipher] crypto key usually carved from [https://cellebrite.com/en/decrypting-databases-using-ram-dump-health-data/ memory] | ||
| + | | <code>Dc</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_WAID</code> | ||
| + | | style="text-align:center;" | 76 | ||
| + | | An [https://support.microsoft.com/en-us/windows/privacy-settings-for-recommendations-offers-in-windows-11-807608ee-3de2-4498-8e7c-eb10d655567f identifier] used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long. | ||
| + | | <code>67f9d9554302a683f01504bce16fa9fb</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_DISCORD_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 77 | ||
| + | | A Discord account identifier | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_REDDIT_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 78 | ||
| + | | A Reddit account identifier | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_AI_PROMPT</code> | ||
| + | | style="text-align:center;" | 79 | ||
| + | | An AI Prompt. Basically a user's query to Google Gemini, ChatGPT, etc. | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_TINDER_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 80 | ||
| + | | A Tinder account identifier. | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_UBER_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 81 | ||
| + | | An Uber account identifier. | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_WAZE_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 82 | ||
| + | | A Waze account identifier. | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_BITCOIN</code> | ||
| + | | style="text-align:center;" | 83 | ||
| + | | A Bitcoin address. | ||
| + | | 17VZNX1SN5NtKa8UQFxwQbFeFc3iqRYhem | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_BITCOIN_SEED</code> | ||
| + | | style="text-align:center;" | 84 | ||
| + | | A Bitcoin seed phrase. | ||
| + | | ozone drill grab fiber curtain grace pudding thank cruise elder eight picnic | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_GOOGLE_ANALYTICS_ID</code> | ||
| + | | style="text-align:center;" | 85 | ||
| + | | A Google analytics ID. | ||
| + | | <code>UA-39296006-23</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_TIKTOK_ACCOUNT_ID</code> | ||
| + | | style="text-align:center;" | 86 | ||
| + | | A TikTok account ID. | ||
| + | | <code>7573833892051993644</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_GDID</code> | ||
| + | | style="text-align:center;" | 87 | ||
| + | | Windows Global Device ID. | ||
| + | | <code>00188012F4614071</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_PUID</code> | ||
| + | | style="text-align:center;" | 88 | ||
| + | | Windows Account Passport Unique ID. | ||
| + | | <code>00037FFE83F764F9</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_CID</code> | ||
| + | | style="text-align:center;" | 89 | ||
| + | | Microsoft Consumer ID. | ||
| + | | <code>082fe674d712d5bb</code> | ||
| + | |- | ||
| + | | <code>ENTITY_TYPE_MUID</code> | ||
| + | | style="text-align:center;" | 90 | ||
| + | | Microsoft User ID. | ||
| + | | <code>2C2453E7D0B6640D4D5B5D31D15B65FF</code> | ||
|} | |} | ||
Latest revision as of 07:33, 11 July 2026
This is an enumeration of the interesting tidbits of analytic value.
This information is also kept in the [EntityType] database table.
| Name | Value | Meaning | Sample |
|---|---|---|---|
ENTITY_TYPE_UNKNOWN
|
0 | The type of entity is not known | |
ENTITY_TYPE_ACCOUNT
|
1 | Any form of account identifier | O2web
|
ENTITY_TYPE_CREDIT_CARD_NUMBER
|
2 | A credit card number | 4377-4378-6799-3241
|
ENTITY_TYPE_EMAIL_ADDRESS
|
3 | An Email Address | john@doe.com
|
ENTITY_TYPE_MAC_ADDRESS
|
4 | A 40-bit MAC address of a network card. vendor lookup | 221A828E66A5
|
ENTITY_TYPE_PERSON
|
5 | The name of a person | John Doe
|
ENTITY_TYPE_PHONE_NUMBER
|
6 | A phone number | 2025551212 |
ENTITY_TYPE_SEARCH_TERM
|
7 | Something the user searched for | cool wallpapers
|
ENTITY_TYPE_TRACKING_NUMBER
|
8 | A package tracking number | |
ENTITY_TYPE_SERIAL_NUMBER
|
9 | A serial number | R5CR105S4QF
|
ENTITY_TYPE_IMEI
|
10 | International Mobile Equipment Identity (IMEI) | 352859302198575
|
ENTITY_TYPE_IMSI
|
11 | International Mobile Subscriber Identity (IMSI) | 310410973162939
|
ENTITY_TYPE_TMSI
|
12 | Temporary Mobile Subscriber Identity (TMSI) | |
ENTITY_TYPE_ICCID
|
13 | Integrated Circuit Card ID or SIM card serial number (ICCID) | 89014103279131609377
|
ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE
|
14 | Spooled Document Title | |
ENTITY_TYPE_YOUTUBE_VIDEO_ID
|
15 | YouTube Video ID | lbM1bW7GiuQ
|
ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER
|
16 | Facebook Account Number | 100073561484450
|
ENTITY_TYPE_AIRLINE_RESERVATION
|
17 | Airline Reservation | |
ENTITY_TYPE_DELL_SERVICE_TAG
|
18 | A Dell Computer Service Tag | BYSPG32
|
ENTITY_TYPE_APPLE_UDID
|
19 | An Apple Unique Device ID (UDID) | 00008101-001875081AF4003B
|
ENTITY_TYPE_FILE_PATH
|
20 | A file path | |
ENTITY_TYPE_VOLUME_SERIAL_NUMBER
|
21 | A serial number assigned to a logical volume by the operating system | D8CE759A
|
ENTITY_TYPE_VOLUME_NAME
|
22 | The name of a volume in a file system | SAMS WORK
|
ENTITY_TYPE_MACHINE_NAME
|
23 | The name of a computer or device | John's Galaxy S20 5G
|
ENTITY_TYPE_ANDROID_ADVERTISING_ID
|
24 | The identifier assigned to Android devices for advertising | 687bd36c-3063-c53b-e944-37fb00001c8f
|
ENTITY_TYPE_SSID
|
25 | The WiFi Service Set ID (SSID) or network name | ASUS_Guest1
|
ENTITY_TYPE_PASSWORD
|
26 | A password | P@ssw0rd123!
|
ENTITY_TYPE_USB_DEVICE
|
27 | A USB device | USB VID 2008 PID 2018
|
ENTITY_TYPE_SHARE_NAME
|
28 | A windows file share name | |
ENTITY_TYPE_LIMEWIRE_CLIENT_ID
|
29 | A LimeWire Client Identifier | |
ENTITY_TYPE_PRODUCT_KEY
|
30 | A Windows product license key | DHR69-3H8RP-QXQXS-CB3BM-HT7XW
|
ENTITY_TYPE_GOOGLE_PLUS_ID
|
31 | A Google Plus Profile ID | 116104691595884789451
|
ENTITY_TYPE_DISNEY_GUEST_ID
|
32 | An identifier of a guest at Disney | |
ENTITY_TYPE_MACHINE_GUID
|
33 | A GUID assigned to a machine by Microsoft | aecfbeea-dc8a-4a56-8155-38266cbb5427
|
ENTITY_TYPE_STEAM_ACCOUNT_ID
|
34 | A Steam game network account identifier | |
ENTITY_TYPE_STEAM_PERSONA
|
35 | A persona on the Steam game network | |
ENTITY_TYPE_STEAM_NAME
|
36 | A name used in a Steam game | |
ENTITY_TYPE_TOR_HIDDEN_SERVICE
|
37 | An identifier of a Tor Hidden Service | |
ENTITY_TYPE_NT_PASSWORD_HASH
|
38 | A hash of a Windows NT logon password | 209c6174da490caeb422f3fa5a7ae634
|
ENTITY_TYPE_AUTHOR
|
39 | The author of a document | Administrator
|
ENTITY_TYPE_OGG_SERIAL_NUMBER
|
40 | The data stream serial number in an Ogg multimedia file | |
ENTITY_TYPE_CRYPTO_KEY_ID
|
41 | The identifier of a cryptographic key | |
ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER
|
42 | The account number of a WhatsApp user | 15014650535
|
ENTITY_TYPE_BITLOCKER_RECOVERY_KEY
|
43 | A recovery key for a BitLocker encrypted volume | |
ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID
|
44 | A Snapchat account identifier | 18746dd0-ca88-4d15-be29-f14ffb9c0f77
|
ENTITY_TYPE_TWITTER_ACCOUNT_ID
|
45 | A Twitter account identifier | 1448294400921116666
|
ENTITY_TYPE_APPLE_AUTHENTICATION_ID
|
46 | An Apple authentication identifier | |
ENTITY_TYPE_KIK_ACCOUNT_ID
|
47 | A Kik Account identifier | |
ENTITY_TYPE_VIBER_ID
|
48 | A Viber identifier | |
ENTITY_TYPE_VIBER_MEMBER_ID
|
49 | A Viber Member identifier | |
ENTITY_TYPE_DISK_SIGNATURE
|
50 | A 32-bit Master Boot Record identifier at offset 440 of the sector | 1619F01B
|
ENTITY_TYPE_AES_128_KEY
|
51 | A 128-bit AES encryption key | |
ENTITY_TYPE_AES_192_KEY
|
52 | A 192-bit AES encryption key | |
ENTITY_TYPE_AES_256_KEY
|
53 | A 256-bit AES encryption key | 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f
|
ENTITY_TYPE_WICKR_ACCOUNT_ID
|
54 | A WICKR account identifier | |
ENTITY_TYPE_APPLE_DSID
|
55 | An Apple Directory Service Identifier | 20458579045
|
ENTITY_TYPE_MEID
|
56 | A Mobile Equipment Identifier (MEID) | 35945868287319
|
ENTITY_TYPE_ACCOUNT_PROVIDER
|
57 | A source for accounts. This can be a website, business, etc. | |
ENTITY_TYPE_DEVICE_NAME
|
58 | The name of a device. This can be automatically assigned or set by a human. | John Smallberries' S21
|
ENTITY_TYPE_AIRDROP_ID
|
59 | An AirDrop ID | 8e6b4a761f3f
|
ENTITY_TYPE_BLUETOOTH_LINK_KEY
|
60 | Bluetooth Link Key | |
ENTITY_TYPE_LINKEDIN_ACCOUNT
|
61 | A LinkedIn account | john-littlejohnl-a99135237
|
ENTITY_TYPE_VIN
|
62 | A vehicle identification number (VIN) | |
ENTITY_TYPE_TELEGRAM_ACCOUNT
|
63 | A Telegram account | |
ENTITY_TYPE_APPLE_ADVERTISING_ID
|
64 | Apple advertising identifier | ED85A326-29E4-4D8C-9343-593B87A5C1EE
|
ENTITY_TYPE_INSTAGRAM_ACCOUNT
|
65 | Instagram account | |
ENTITY_TYPE_TEXT_NOW_ACCOUNT
|
66 | TextNow account | |
ENTITY_TYPE_SKYPE_ACCOUNT
|
67 | Skype account | jimsunny_1
|
ENTITY_TYPE_DEVICE_ID
|
68 | An identifier for a device | 0afc69e58bfc3a73
|
ENTITY_TYPE_GROUP
|
69 | A logical group such as a company, organization, gang, team, etc. | |
ENTITY_TYPE_CRYPT14_SALT
|
70 | The Salt used in crypt14 WhatsApp encryption | f0892622178268c7f8d94094c3bc81075f069524d7958efe02aecd4f22659e0a
|
ENTITY_TYPE_DRIVERS_LICENSE_NUMBER
|
71 | A driver's license number | |
ENTITY_TYPE_PASSPORT_NUMBER
|
72 | A passport number | |
ENTITY_TYPE_SOCIAL_SECURITY_NUMBER
|
73 | A social security number | 233-55-7808
|
ENTITY_TYPE_LICENSE_PLATE
|
74 | A vehicle license plate number | |
ENTITY_TYPE_SQLCIPHER_KEY
|
75 | A SQLCipher crypto key usually carved from memory | Dc
|
ENTITY_TYPE_WAID
|
76 | An identifier used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long. | 67f9d9554302a683f01504bce16fa9fb
|
ENTITY_TYPE_DISCORD_ACCOUNT_ID
|
77 | A Discord account identifier | |
ENTITY_TYPE_REDDIT_ACCOUNT_ID
|
78 | A Reddit account identifier | |
ENTITY_TYPE_AI_PROMPT
|
79 | An AI Prompt. Basically a user's query to Google Gemini, ChatGPT, etc. | |
ENTITY_TYPE_TINDER_ACCOUNT_ID
|
80 | A Tinder account identifier. | |
ENTITY_TYPE_UBER_ACCOUNT_ID
|
81 | An Uber account identifier. | |
ENTITY_TYPE_WAZE_ACCOUNT_ID
|
82 | A Waze account identifier. | |
ENTITY_TYPE_BITCOIN
|
83 | A Bitcoin address. | 17VZNX1SN5NtKa8UQFxwQbFeFc3iqRYhem |
ENTITY_TYPE_BITCOIN_SEED
|
84 | A Bitcoin seed phrase. | ozone drill grab fiber curtain grace pudding thank cruise elder eight picnic |
ENTITY_TYPE_GOOGLE_ANALYTICS_ID
|
85 | A Google analytics ID. | UA-39296006-23
|
ENTITY_TYPE_TIKTOK_ACCOUNT_ID
|
86 | A TikTok account ID. | 7573833892051993644
|
ENTITY_TYPE_GDID
|
87 | Windows Global Device ID. | 00188012F4614071
|
ENTITY_TYPE_PUID
|
88 | Windows Account Passport Unique ID. | 00037FFE83F764F9
|
ENTITY_TYPE_CID
|
89 | Microsoft Consumer ID. | 082fe674d712d5bb
|
ENTITY_TYPE_MUID
|
90 | Microsoft User ID. | 2C2453E7D0B6640D4D5B5D31D15B65FF
|