Difference between revisions of "Truxton get media investigation"
Jump to navigation
Jump to search
(Created page with "This retrieves the [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the first investigation that contains this media. This corresponds to the <code>[ID]</...") |
|||
| Line 13: | Line 13: | ||
==<code>media_id</code>== | ==<code>media_id</code>== | ||
The string representation of a [https://en.wikipedia.org/wiki/Universally_unique_identifier globally unique identifier] of the media to export the hashes from. | The string representation of a [https://en.wikipedia.org/wiki/Universally_unique_identifier globally unique identifier] of the media to export the hashes from. | ||
| − | This corresponds to the <code>[ID]</code> column of the <code>[Media]</code> table. | + | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table. |
==<code>destination_string</code>== | ==<code>destination_string</code>== | ||
Latest revision as of 07:49, 3 February 2024
This retrieves the GUID of the first investigation that contains this media.
This corresponds to the [ID] column of the [Investigation] table.
Contents
Syntax
void truxton_get_media_investigation( uint64_t truxton_handle, char const * media_id, char * destination_string, size_t max_size );
Parameters
truxton_handle
The handle created by the truxton_create call.
media_id
The string representation of a globally unique identifier of the media to export the hashes from.
This corresponds to the [ID] column of the [Media] table.
destination_string
The string to be written to.
max_size
The maximum number of characters that can be written to destination_string.
Sample
void debug( uint64_t truxton, uint64_t etl_handle )
{
char investigation_id[65];
truxton_get_media_investigation( truxton, "5ecbebc4-9937-2b88-f691-91a800000024", investigation_id, sizeof( investigation_id ) );
printf( "Investigation is %s\n", investigation_id );
}
