Difference between revisions of "Entity Types"
Jump to navigation
Jump to search
| Line 29: | Line 29: | ||
| style="text-align:center;" | 4 | | style="text-align:center;" | 4 | ||
| A 40-bit [https://en.wikipedia.org/wiki/MAC_address MAC address] of a network card. [https://standards.ieee.org/products-services/regauth/index.html vendor lookup] | | A 40-bit [https://en.wikipedia.org/wiki/MAC_address MAC address] of a network card. [https://standards.ieee.org/products-services/regauth/index.html vendor lookup] | ||
| + | | <code>221A828E66A5</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PERSON</code> | | <code>ENTITY_TYPE_PERSON</code> | ||
| style="text-align:center;" | 5 | | style="text-align:center;" | 5 | ||
| The name of a person | | The name of a person | ||
| + | | <code>John Doe</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PHONE_NUMBER</code> | | <code>ENTITY_TYPE_PHONE_NUMBER</code> | ||
| style="text-align:center;" | 6 | | style="text-align:center;" | 6 | ||
| A phone number | | A phone number | ||
| + | | <code>2025551212<code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SEARCH_TERM</code> | | <code>ENTITY_TYPE_SEARCH_TERM</code> | ||
| style="text-align:center;" | 7 | | style="text-align:center;" | 7 | ||
| Something the user searched for | | Something the user searched for | ||
| + | | <code>cool wallpapers</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_TRACKING_NUMBER</code> | | <code>ENTITY_TYPE_TRACKING_NUMBER</code> | ||
| Line 49: | Line 53: | ||
| style="text-align:center;" | 9 | | style="text-align:center;" | 9 | ||
| A serial number | | A serial number | ||
| + | | <code>R5CR105S4QF</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_IMEI</code> | | <code>ENTITY_TYPE_IMEI</code> | ||
| style="text-align:center;" | 10 | | style="text-align:center;" | 10 | ||
| [https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity International Mobile Equipment Identity] (IMEI) | | [https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity International Mobile Equipment Identity] (IMEI) | ||
| + | | <code>352859302198575</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_IMSI</code> | | <code>ENTITY_TYPE_IMSI</code> | ||
| style="text-align:center;" | 11 | | style="text-align:center;" | 11 | ||
| [https://en.wikipedia.org/wiki/International_mobile_subscriber_identity International Mobile Subscriber Identity] (IMSI) | | [https://en.wikipedia.org/wiki/International_mobile_subscriber_identity International Mobile Subscriber Identity] (IMSI) | ||
| + | | <code>310410973162939</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_TMSI</code> | | <code>ENTITY_TYPE_TMSI</code> | ||
| Line 65: | Line 72: | ||
| style="text-align:center;" | 13 | | style="text-align:center;" | 13 | ||
| [https://en.wikipedia.org/wiki/SIM_card#ICCID Integrated Circuit Card ID or SIM card serial number] (ICCID) | | [https://en.wikipedia.org/wiki/SIM_card#ICCID Integrated Circuit Card ID or SIM card serial number] (ICCID) | ||
| + | | <code>89014103279131609377</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE</code> | | <code>ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE</code> | ||
| Line 106: | Line 114: | ||
| style="text-align:center;" | 23 | | style="text-align:center;" | 23 | ||
| The name of a computer or device | | The name of a computer or device | ||
| + | | <code>John's Galaxy S20 5G</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_ANDROID_ADVERTISING_ID</code> | | <code>ENTITY_TYPE_ANDROID_ADVERTISING_ID</code> | ||
| Line 115: | Line 124: | ||
| style="text-align:center;" | 25 | | style="text-align:center;" | 25 | ||
| The WiFi [https://en.wikipedia.org/wiki/Service_set_(802.11_network)#Service_set_identifier_(SSID) Service Set ID] (SSID) or network name | | The WiFi [https://en.wikipedia.org/wiki/Service_set_(802.11_network)#Service_set_identifier_(SSID) Service Set ID] (SSID) or network name | ||
| + | | <code>ASUS_Guest1</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_PASSWORD</code> | | <code>ENTITY_TYPE_PASSWORD</code> | ||
| style="text-align:center;" | 26 | | style="text-align:center;" | 26 | ||
| A password | | A password | ||
| + | | <code>P@ssw0rd123!</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_USB_DEVICE</code> | | <code>ENTITY_TYPE_USB_DEVICE</code> | ||
| Line 185: | Line 196: | ||
| style="text-align:center;" | 42 | | style="text-align:center;" | 42 | ||
| The account number of a WhatsApp user | | The account number of a WhatsApp user | ||
| + | | <code>15014650535</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_BITLOCKER_RECOVERY_KEY</code> | | <code>ENTITY_TYPE_BITLOCKER_RECOVERY_KEY</code> | ||
| Line 197: | Line 209: | ||
| style="text-align:center;" | 45 | | style="text-align:center;" | 45 | ||
| A Twitter account identifier | | A Twitter account identifier | ||
| + | | <code>1448294400921116666</code> | ||
|- | |- | ||
| <code>ENTITY_TYPE_APPLE_AUTHENTICATION_ID</code> | | <code>ENTITY_TYPE_APPLE_AUTHENTICATION_ID</code> | ||
Revision as of 05:21, 29 August 2025
This is an enumeration of the interesting tidbits of analytic value.
This information is also kept in the [EntityType] database table.
| Name | Value | Meaning | Sample |
|---|---|---|---|
ENTITY_TYPE_UNKNOWN
|
0 | The type of entity is not known | |
ENTITY_TYPE_ACCOUNT
|
1 | Any form of account identifier | O2web
|
ENTITY_TYPE_CREDIT_CARD_NUMBER
|
2 | A credit card number | |
ENTITY_TYPE_EMAIL_ADDRESS
|
3 | An Email Address | |
ENTITY_TYPE_MAC_ADDRESS
|
4 | A 40-bit MAC address of a network card. vendor lookup | 221A828E66A5
|
ENTITY_TYPE_PERSON
|
5 | The name of a person | John Doe
|
ENTITY_TYPE_PHONE_NUMBER
|
6 | A phone number | 2025551212 |
ENTITY_TYPE_SEARCH_TERM
|
7 | Something the user searched for | cool wallpapers
|
ENTITY_TYPE_TRACKING_NUMBER
|
8 | A package tracking number | |
ENTITY_TYPE_SERIAL_NUMBER
|
9 | A serial number | R5CR105S4QF
|
ENTITY_TYPE_IMEI
|
10 | International Mobile Equipment Identity (IMEI) | 352859302198575
|
ENTITY_TYPE_IMSI
|
11 | International Mobile Subscriber Identity (IMSI) | 310410973162939
|
ENTITY_TYPE_TMSI
|
12 | Temporary Mobile Subscriber Identity (TMSI) | |
ENTITY_TYPE_ICCID
|
13 | Integrated Circuit Card ID or SIM card serial number (ICCID) | 89014103279131609377
|
ENTITY_TYPE_SPOOLED_DOCUMENT_TITLE
|
14 | Spooled Document Title | |
ENTITY_TYPE_YOUTUBE_VIDEO_ID
|
15 | YouTube Video ID | |
ENTITY_TYPE_FACEBOOK_ACCOUNT_NUMBER
|
16 | Facebook Account Number | 100073561484450
|
ENTITY_TYPE_AIRLINE_RESERVATION
|
17 | Airline Reservation | |
ENTITY_TYPE_DELL_SERVICE_TAG
|
18 | A Dell Computer Service Tag | |
ENTITY_TYPE_APPLE_UDID
|
19 | An Apple Unique Device ID (UDID) | |
ENTITY_TYPE_FILE_PATH
|
20 | A file path | |
ENTITY_TYPE_VOLUME_SERIAL_NUMBER
|
21 | A serial number assigned to a logical volume by the operating system | |
ENTITY_TYPE_VOLUME_NAME
|
22 | The name of a volume in a file system | |
ENTITY_TYPE_MACHINE_NAME
|
23 | The name of a computer or device | John's Galaxy S20 5G
|
ENTITY_TYPE_ANDROID_ADVERTISING_ID
|
24 | The identifier assigned to Android devices for advertising | 687bd36c-3063-c53b-e944-37fb00001c8f
|
ENTITY_TYPE_SSID
|
25 | The WiFi Service Set ID (SSID) or network name | ASUS_Guest1
|
ENTITY_TYPE_PASSWORD
|
26 | A password | P@ssw0rd123!
|
ENTITY_TYPE_USB_DEVICE
|
27 | A USB device | |
ENTITY_TYPE_SHARE_NAME
|
28 | A windows file share name | |
ENTITY_TYPE_LIMEWIRE_CLIENT_ID
|
29 | A LimeWire Client Identifier | |
ENTITY_TYPE_PRODUCT_KEY
|
30 | A Windows product license key | |
ENTITY_TYPE_GOOGLE_PLUS_ID
|
31 | A Google Plus Profile ID | 116104691595884789451
|
ENTITY_TYPE_DISNEY_GUEST_ID
|
32 | An identifier of a guest at Disney | |
ENTITY_TYPE_MACHINE_GUID
|
33 | A GUID assigned to a machine by Microsoft | |
ENTITY_TYPE_STEAM_ACCOUNT_ID
|
34 | A Steam game network account identifier | |
ENTITY_TYPE_STEAM_PERSONA
|
35 | A persona on the Steam game network | |
ENTITY_TYPE_STEAM_NAME
|
36 | A name used in a Steam game | |
ENTITY_TYPE_TOR_HIDDEN_SERVICE
|
37 | An identifier of a Tor Hidden Service | |
ENTITY_TYPE_NT_PASSWORD_HASH
|
38 | A hash of a Windows NT logon password | |
ENTITY_TYPE_AUTHOR
|
39 | The author of a document | Administrator
|
ENTITY_TYPE_OGG_SERIAL_NUMBER
|
40 | The data stream serial number in an Ogg multimedia file | |
ENTITY_TYPE_CRYPTO_KEY_ID
|
41 | The identifier of a cryptographic key | |
ENTITY_TYPE_WHATSAPP_ACCOUNT_NUMBER
|
42 | The account number of a WhatsApp user | 15014650535
|
ENTITY_TYPE_BITLOCKER_RECOVERY_KEY
|
43 | A recovery key for a BitLocker encrypted volume | |
ENTITY_TYPE_SNAPCHAT_ACCOUNT_ID
|
44 | A Snapchat account identifier | |
ENTITY_TYPE_TWITTER_ACCOUNT_ID
|
45 | A Twitter account identifier | 1448294400921116666
|
ENTITY_TYPE_APPLE_AUTHENTICATION_ID
|
46 | An Apple authentication identifier | |
ENTITY_TYPE_KIK_ACCOUNT_ID
|
47 | A Kik Account identifier | |
ENTITY_TYPE_VIBER_ID
|
48 | A Viber identifier | |
ENTITY_TYPE_VIBER_MEMBER_ID
|
49 | A Viber Member identifier | |
ENTITY_TYPE_DISK_SIGNATURE
|
50 | A 32-bit Master Boot Record identifier at offset 440 of the sector | |
ENTITY_TYPE_AES_128_KEY
|
51 | A 128-bit AES encryption key | |
ENTITY_TYPE_AES_192_KEY
|
52 | A 192-bit AES encryption key | |
ENTITY_TYPE_AES_256_KEY
|
53 | A 256-bit AES encryption key | |
ENTITY_TYPE_WICKR_ACCOUNT_ID
|
54 | A WICKR account identifier | |
ENTITY_TYPE_APPLE_DSID
|
55 | An Apple Directory Service Identifier | |
ENTITY_TYPE_MEID
|
56 | A Mobile Equipment Identifier (MEID) | |
ENTITY_TYPE_ACCOUNT_PROVIDER
|
57 | A source for accounts. This can be a website, business, etc. | |
ENTITY_TYPE_DEVICE_NAME
|
58 | The name of a device. This can be automatically assigned or set by a human. | John Smallberries' S21
|
ENTITY_TYPE_AIRDROP_ID
|
59 | An AirDrop ID | |
ENTITY_TYPE_BLUETOOTH_LINK_KEY
|
60 | Bluetooth Link Key | |
ENTITY_TYPE_LINKEDIN_ACCOUNT
|
61 | A LinkedIn account | |
ENTITY_TYPE_VIN
|
62 | A vehicle identification number (VIN) | |
ENTITY_TYPE_TELEGRAM_ACCOUNT
|
63 | A Telegram account | |
ENTITY_TYPE_APPLE_ADVERTISING_ID
|
64 | Apple advertising identifier | |
ENTITY_TYPE_INSTAGRAM_ACCOUNT
|
65 | Instagram account | |
ENTITY_TYPE_TEXT_NOW_ACCOUNT
|
66 | TextNow account | |
ENTITY_TYPE_SKYPE_ACCOUNT
|
67 | Skype account | |
ENTITY_TYPE_DEVICE_ID
|
68 | An identifier for a device | 0afc69e58bfc3a73
|
ENTITY_TYPE_GROUP
|
69 | A logical group such as a company, organization, gang, team, etc. | |
ENTITY_TYPE_CRYPT14_SALT
|
70 | The Salt used in crypt14 WhatsApp encryption | |
ENTITY_TYPE_DRIVERS_LICENSE_NUMBER
|
71 | A driver's license number | |
ENTITY_TYPE_PASSPORT_NUMBER
|
72 | A passport number | |
ENTITY_TYPE_SOCIAL_SECURITY_NUMBER
|
73 | A social security number | |
ENTITY_TYPE_LICENSE_PLATE
|
74 | A vehicle license plate number | |
ENTITY_TYPE_SQLCIPHER_KEY
|
75 | A SQLCipher crypto key usually carved from memory | |
ENTITY_TYPE_WAID
|
76 | An identifier used by Microsoft Windows to target you with advertising. It is 32 hexadecimal digits long. | |
ENTITY_TYPE_DISCORD_ACCOUNT_ID
|
77 | A Discord account identifier | |
ENTITY_TYPE_REDDIT_ACCOUNT_ID
|
78 | A Reddit account identifier | |
ENTITY_TYPE_AI_PROMPT
|
79 | An AI Prompt. Basically a user's query to Google Gemini, ChatGPT, etc. | |
ENTITY_TYPE_TINDER_ACCOUNT_ID
|
80 | A Tinder account identifier. | |
ENTITY_TYPE_UBER_ACCOUNT_ID
|
81 | An Uber account identifier. | |
ENTITY_TYPE_WAZE_ACCOUNT_ID
|
82 | A Waze account identifier. |