Difference between revisions of "Type KnowledgeC"
Jump to navigation
Jump to search
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{| style="float:right;border:1px solid black" | {| style="float:right;border:1px solid black" | ||
| − | |+ Details | + | |+ [[Type_NOAA_ENC|<<]] Details [[Type_Shared_Cache_Strings|>>]] |
| Defined Constant | | Defined Constant | ||
| <code>Type_KnowledgeC</code> | | <code>Type_KnowledgeC</code> | ||
| Line 17: | Line 17: | ||
|- | |- | ||
| MIME Type | | MIME Type | ||
| − | | <code>application/ | + | | <code>application/vnd.sqlite3</code> |
|- | |- | ||
| Filename Extension | | Filename Extension | ||
| Line 43: | Line 43: | ||
* [[Type_SQLite_Sample]] | * [[Type_SQLite_Sample]] | ||
| − | =Filenames | + | =Filenames Seen= |
* <code>knowledgeC.db</code> | * <code>knowledgeC.db</code> | ||
Latest revision as of 14:33, 15 April 2025
| Defined Constant | Type_KnowledgeC
|
| File Type Value | 1095 |
| Parent Type | SQLite |
| Carve | Yes |
| Format Details | Yes |
| MIME Type | application/vnd.sqlite3
|
| Filename Extension | db
|
| Typical Filename | knowledgeC.db
|
KnowledgeC database
Description
iOS KnowledgeC Database
Truxton Exploiters
This file type is handled by the following ETLs:
Items Produced
Truxton will extract the following from this file type:
- ENTITY_TYPE_DEVICE_NAME
- ENTITY_TYPE_MAC_ADDRESS
- EVENT_TYPE_BLUETOOTH_CONNECTED
- EVENT_TYPE_BLUETOOTH_DISCONNECTED
- Type_File_Details
- Type_SQLite_Sample
Filenames Seen
knowledgeC.db
