Type KnowledgeC

<< Details >>

Defined Constant	Type_KnowledgeC
File Type Value	1095
Parent Type	SQLite
Carve	Yes
Format Details	Yes
MIME Type	application/vnd.sqlite3
Filename Extension	db
Typical Filename	knowledgeC.db

KnowledgeC database

Description

iOS KnowledgeC Database

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Items Produced

Truxton will extract the following from this file type:

• ENTITY_TYPE_DEVICE_NAME
• ENTITY_TYPE_MAC_ADDRESS
• EVENT_TYPE_BLUETOOTH_CONNECTED
• EVENT_TYPE_BLUETOOTH_DISCONNECTED
• Type_File_Details
• Type_SQLite_Sample

Filenames Seen

• knowledgeC.db