Main Page

Welcome to the Truxton Technical Wiki. This wiki is here for developers to extend Truxton's capabilities. There aren't any forensic techniques discussed here unless someone makes a page for it. Truxton Forensics will be contributing articles and sample code to allow you to make Truxton do what you need.

• How Truxton Works - A brief overview of what Truxton does
• File Types Supported - A list of files that Truxton knows about
• Log4j Vulnerability - How to fix

For Power Users

• Configuration System - Everything you ever wanted to know about how to configure Truxton
• Creating NSRL Hashset - Step by step instructions on creating the NSRL hashset
• Depot File Format - This is how Truxton stores the contents of files extracted from source media
• Exploitation Layer - A description of how Truxton exploits data
• Hash Set File Format - For eliminating useless files based on the MD5 hash of the contents
• Helpful scripts - Scripts we have found useful
• Les - The Load Status Monitor
• Lessons Learned - How to do some non-obvious things
• Loader Configuration - Information on configuring Truxton
• Load List File Format - For scripting the loading of lots of media
• Loading Strategies - Discussion on the different ways to load data into Truxton
• Log File Locations - Where Truxton logs things
• Logging - Details about Truxton's logging
• Maintenance - How to perform a Truxton oil change
• Manually Uninstall Truxton - Remove all evidence that Truxton was on a machine
• Message Concentrator - How to reduce the number of database connections
• Securing Truxton Services - For customers who need it
• Syslog - For monitoring everything
• Truxton Service - What the Truxton Service does
• Truxton Forensic Rack - When you've got lots of data to process
• What Gets Installed - How Truxton changes your system

For Developers

The following are starting points for developers.

• Developer's Guide
• Python Support
• Truxton SDK