Difference between revisions of "Truxton file create artifact"
Jump to navigation
Jump to search
| Line 15: | Line 15: | ||
=Sample= | =Sample= | ||
| − | <syntaxhighlight lang="C" highlight=" | + | <syntaxhighlight lang="C" highlight="5"> |
void process_file(uint64_t truxton) | void process_file(uint64_t truxton) | ||
{ | { | ||
uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10"); | uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10"); | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
uint64_t artifact = truxton_file_create_artifact(file); | uint64_t artifact = truxton_file_create_artifact(file); | ||
Revision as of 17:15, 9 June 2020
This creates an artifact from this file that you can use in the Artifact API.
An artifact object is how you add records to the Entity table.
Syntax
uint64_t truxton_file_create_artifact( uint64_t file_handle );
Parameters
file_handle
The handle created by the truxton_file_open_id or truxton_file_open_md5 call.
Return value
A handle to an artifact object.
Sample
void process_file(uint64_t truxton)
{
uint64_t file = truxton_file_open_md5(truxton, "9ec8fb6095c35eff2b236863b7caaf10");
uint64_t artifact = truxton_file_create_artifact(file);
truxton_artifact_set_type(artifact, ENTITY_TYPE_SERIAL_NUMBER);
truxton_artifact_set_value(artifact, "1234" );
truxton_artifact_save(artifact);
truxton_artifact_destroy(artifact);
truxton_file_destroy(file);
}
