Difference between revisions of "Truxton URL Interface"
| Line 14: | Line 14: | ||
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact. | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the artifact. | ||
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Entity Table|Entity]]<nowiki>]</nowiki></code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact. | ||
| + | </source> | ||
=Camera= | =Camera= | ||
| Line 27: | Line 32: | ||
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | ||
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[EXIF Table|EXIF]]<nowiki>]</nowiki></code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information. | ||
| + | </source> | ||
=Event= | =Event= | ||
| Line 40: | Line 50: | ||
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | ||
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[Event Table|Event]]<nowiki>]</nowiki></code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton. | ||
| + | </source> | ||
=File= | =File= | ||
| Line 53: | Line 68: | ||
The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | The [https://en.wikipedia.org/wiki/Universally_unique_identifier GUID] of the camera information. | ||
This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table. | This corresponds to the <code>[ID]</code> column of the <code><nowiki>[</nowiki>[[File Table|File]]<nowiki>]</nowiki></code> table. | ||
| + | |||
| + | ==Sample== | ||
| + | <source lang="HTML" highlight="5"> | ||
| + | Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton. | ||
| + | </source> | ||
| + | |||
=Hash= | =Hash= | ||
Revision as of 05:30, 11 December 2025
Truxton installs a protocol handler for the "truxton:" protocol on Windows machines. This allows you to use HTML to start the Truxton Analyst Desktop and take you to specific views.
Contents
Artifact
You can link directly to a specific artifact in Truxton.
Syntax
truxton://artifact/{GUID}
Parameters
GUID
The GUID of the artifact.
This corresponds to the [ID] column of the [Entity] table.
Sample
Click <a href="truxton://artifact/6916456c-16e2-3ad3-9824-4f8900000000">here</a> to see the artifact.
Camera
You can link directly to a specific camera information view in Truxton.
Syntax
truxton://camera/{GUID}
Parameters
GUID
The GUID of the camera information.
This corresponds to the [ID] column of the [EXIF] table.
Sample
Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-674300000154">here</a> to see the camera information.
Event
You can link directly to a specific event view in Truxton.
Syntax
truxton://event/{GUID}
Parameters
GUID
The GUID of the camera information.
This corresponds to the [ID] column of the [Event] table.
Sample
Click <a href="truxton://event/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
File
You can link directly to a specific file view in Truxton.
Syntax
truxton://file/{GUID}
Parameters
GUID
The GUID of the camera information.
This corresponds to the [ID] column of the [File] table.
Sample
Click <a href="truxton://camera/69394b56-7957-a1c6-7aa2-67430000499c">here</a> to see the event in Truxton.
Hash
You can link directly to a specific file view in Truxton.
Syntax
truxton://hash/{GUID}
Parameters
hash
An MD5 or SHA1 hash.
Investigation
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://investigation/{GUID}
Parameters
GUID
The GUID of the camera information.
This corresponds to the [ID] column of the [Investigation] table.
Location
You can link directly to a specific location view in Truxton.
Syntax
truxton://location/{GUID}
Parameters
GUID
The GUID of the location.
This corresponds to the [ID] column of the [Location] table.
md5
You can link directly to a specific file view in Truxton.
Syntax
truxton://md5/{hash}
Parameters
hash
An MD5 hash.
Media
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://media/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [Media] table.
Message
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://message/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [Message] table.
sha1
You can link directly to a specific investigation view in Truxton.
Syntax
truxton://sha1/{hash}
Parameters
hash
The SHA1 hash value
tutorial
Re-display the initial desktop tutorial
Syntax
truxton://tutorial
Parameters
GUID
The GUID of the media.
Website
You can link directly to a specific website visit view in Truxton.
Syntax
truxton://website/{GUID}
Parameters
GUID
The GUID of the media.
This corresponds to the [ID] column of the [WebsiteVisit] table.
