Difference between revisions of "Developer's Guide"
Jump to navigation
Jump to search
| Line 11: | Line 11: | ||
* [[Message Bus Drivers]] - How Truxton can be message queue technology agnostic | * [[Message Bus Drivers]] - How Truxton can be message queue technology agnostic | ||
* [[Azure]] - Running Truxton on and engaging Azure services | * [[Azure]] - Running Truxton on and engaging Azure services | ||
| − | * [[Turn on Syslogging]] | + | * [[Turn on Syslogging]] - Truxton can use [https://en.wikipedia.org/wiki/Syslog syslog] to send tremendous amounts of debugging data |
* [[Debugging the Loader]] | * [[Debugging the Loader]] | ||
* [[Add A New File Type]] - How to add a new file type to Truxton and exploit it | * [[Add A New File Type]] - How to add a new file type to Truxton and exploit it | ||
Revision as of 09:01, 8 December 2020
Contents
Truxton Developer's Guide
Truxton Stuff
- How Truxton Works
- Truxton SDK
- Database Tables - A detailed look at several of Truxton's tables
- Message Bus Drivers - How Truxton can be message queue technology agnostic
- Azure - Running Truxton on and engaging Azure services
- Turn on Syslogging - Truxton can use syslog to send tremendous amounts of debugging data
- Debugging the Loader
- Add A New File Type - How to add a new file type to Truxton and exploit it
- Depot file format - The way Truxton stores file contents
- Load List file format - Details on the load script format
- File Type Identification
- VC Redistributables
- Configuration System - All the different ways to configure Truxton
- Useful SQL Queries - Sample queries for accessing Truxton from a SQL tool (like dBeaver)
- Temporary Filenames - How to identify the source of temporary files
- Watch Desktop Logs
- TruxtonService.xml
- ETL Stages
- Message Bus Messages
- Load Validation - How to independently validate that Truxton is working correctly
- How to Secure Truxton Services - If you need Truxton to run on a locked down machine
Data Types
Truxton uses lots of defined constants and enums. Here's a list of them.
- Carve Options - The meaning of carving option flags
- Content Status - The status of the contents of a file.
- Data Types - How the bytes in a file can be interpreted.
- Depot Types - The different types of data that can be stored in a depot.
- Entity Types - The types of artifacts in Truxton
- Event Types - The types of events in Truxton
- File Export Criteria - The different criteria you can specify in the C API for exporting files
- File Export Options - The different options you can specify in the C API for exporting files
- File Content Origins - Tells you where the file contents came from
- Investigation Statuses - The different statuses of generic investigation
- Investigation Types - Some default types of investigations
- Load Configurations - The default paths media can take through the exploitation process.
- Location Types - The different types of geographic locations
- Media Load Percentage - A discussion about what the percent-complete value means during loading
- Media Status - The different states that media can be in
- Media Types - The formats of media that Truxton can ingest
- Message Participants - The types of participants in a communication
- Message Types - The different types of message that Truxton handles
- Object Types - The types of objects in Truxton
- Relation Types - The types of relationships between objects that Truxton supports
- URL Methods - The different reasons why a URL was retrieved
- URL Types - The types of URLs
