Difference between revisions of "TPIF"
(Created page with "A Truxton Portable Investigation File (TPIF) contains the metadata associated with media in Truxton. It will optionally contain the contents of the files referenced in the met...") |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 5: | Line 5: | ||
A TPIF is a [https://en.wikipedia.org/wiki/ZIP_(file_format) Zip] file that contains the metadata from the tables in the database associated with media. | A TPIF is a [https://en.wikipedia.org/wiki/ZIP_(file_format) Zip] file that contains the metadata from the tables in the database associated with media. | ||
It will optionally contain the unique file contents of any file referenced in the meta data. | It will optionally contain the unique file contents of any file referenced in the meta data. | ||
| + | In Windows, you can add a <code>.zip</code> extension to the file and open it with any tool you wish. | ||
==Metadata== | ==Metadata== | ||
| Line 15: | Line 16: | ||
If the creator of the TPIF chose to export the referenced files, only the unique contents will be present in the TPIF. | If the creator of the TPIF chose to export the referenced files, only the unique contents will be present in the TPIF. | ||
These will be present in the <code>_content</code> folder in the root of the TPIF. | These will be present in the <code>_content</code> folder in the root of the TPIF. | ||
| + | The full path to content in the TPIF is based upon the [https://en.wikipedia.org/wiki/MD5 MD5] hash of the content. | ||
| + | The first two bytes of the hash of the content will be used to create the folders under <code>_content</code>. | ||
| + | For example, content with a hash of "1a2b3e75d6f4ddfb8c79d28642e03472" will have a path in the TPIF of "<code>_content\1a\2b\1a2b3e75d6f4ddfb8c79d28642e03472</code>" | ||
Latest revision as of 15:09, 25 July 2022
A Truxton Portable Investigation File (TPIF) contains the metadata associated with media in Truxton. It will optionally contain the contents of the files referenced in the metadata.
Format
A TPIF is a Zip file that contains the metadata from the tables in the database associated with media.
It will optionally contain the unique file contents of any file referenced in the meta data.
In Windows, you can add a .zip extension to the file and open it with any tool you wish.
Metadata
The format of the metadata in the TPIF is Postgres Bulk Insert Binary format. This is the smallest and fastest way to get data into Postgres. The name of the file in the TPIF corresponds to the name of the table in the database. Filename extensions are ignored.
File Contents
If the creator of the TPIF chose to export the referenced files, only the unique contents will be present in the TPIF.
These will be present in the _content folder in the root of the TPIF.
The full path to content in the TPIF is based upon the MD5 hash of the content.
The first two bytes of the hash of the content will be used to create the folders under _content.
For example, content with a hash of "1a2b3e75d6f4ddfb8c79d28642e03472" will have a path in the TPIF of "_content\1a\2b\1a2b3e75d6f4ddfb8c79d28642e03472"
