Truxton get media investigation

This retrieves the GUID of the first investigation that contains this media. This corresponds to the [ID] column of the [Investigation] table.

Syntax

void truxton_get_media_investigation( uint64_t truxton_handle, char const * media_id, char * destination_string, size_t max_size );

Parameters

truxton_handle

The handle created by the truxton_create call.

media_id

The string representation of a globally unique identifier of the media to export the hashes from. This corresponds to the [ID] column of the [Media] table.

destination_string

The string to be written to.

max_size

The maximum number of characters that can be written to destination_string.

Sample

void debug( uint64_t truxton, uint64_t etl_handle )
{
   char investigation_id[65];

   truxton_get_media_investigation( truxton, "5ecbebc4-9937-2b88-f691-91a800000024", investigation_id, sizeof( investigation_id ) );

   printf( "Investigation is %s\n", investigation_id );
}