Difference between revisions of "Developer's Guide"
Jump to navigation
Jump to search
| Line 10: | Line 10: | ||
* [[Message Bus Drivers]] | * [[Message Bus Drivers]] | ||
* [[Azure]] | * [[Azure]] | ||
| + | * [[Turn on Syslogging]] | ||
* [[Debugging the Loader]] | * [[Debugging the Loader]] | ||
* [[Add A New File Type]] | * [[Add A New File Type]] | ||
Revision as of 12:49, 15 June 2020
Contents
Truxton Developer's Guide
Truxton Stuff
- How Truxton Works
- Truxton SDK
- Database Tables
- Message Bus Drivers
- Azure
- Turn on Syslogging
- Debugging the Loader
- Add A New File Type
- Depot file format
- Load List file format
- File Type Identification
- VC Redistributables
- Configuration System
- Useful SQL Queries
- Temporary Filenames
- Watch Desktop Logs
- TruxtonService.xml
- ETL Stages
- Message Bus Messages
- Load Validation - How to independently validate that Truxton is working correctly
- How to Secure Truxton Services - If you need Truxton to run on a locked down machine
Data Types
Truxton uses lots of defined constants and enums. Here's a list of them.
- Carve Options - The meaning of carving option flags
- Content Status - The status of the contents of a file.
- Data Types - How the bytes in a file can be interpreted.
- Depot Types - The different types of data that can be stored in a depot.
- Entity Types - The types of artifacts in Truxton
- Event Types - The types of events in Truxton
- Investigation Statuses - The different statuses of generic investigation
- Investigation Types - Some default types of investigations
- Load Configurations - The default paths media can take through the exploitation process.
- Location Types - The different types of geographic locations
- Media Load Percentage - A discussion about what the percent-complete value means during loading
- Media Status
- Media Types
- Message Types
- Object Types
- File Content Origins
- Relation Types
- URL Methods
- URL Types
