Media Types

When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the [MediaTypeID] column of the [Media] table in the database.

This information is also kept in the [MediaType] database table.

Name	Value	Meaning
MEDIA_TYPE_UNKNOWN	0	We don't know what type of media this is.
MEDIA_TYPE_LOGICAL_FILES	1	A folder on the loader machine.
MEDIA_TYPE_PHYSICAL_HARD_DISK	2	The media is a physical hard drive connected, hopefully through a write-blocker, to the loader machine processed as a bag of sectors.
MEDIA_TYPE_HARD_DISK_IMAGE	3	A forensic copy of a hard disk in a file.
MEDIA_TYPE_HARD_DISK_FOLDER	4	A hard drive as a folder. Mounting a hard disk image is an example. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_CD	5	A compact disc attached to the loader machine processed as a bag of sectors.
MEDIA_TYPE_CD_IMAGE	6	A forensic copy of a compact disc in a file.
MEDIA_TYPE_CD_FOLDER	7	A compact disc mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_DVD	8	A DVD attached to the loader machine processed as a bag of sectors.
MEDIA_TYPE_DVD_IMAGE	9	A forensic copy of a DVD in a file.
MEDIA_TYPE_DVD_FOLDER	10	A DVD mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_BLURAY	11	A BluRay attached to the loader machine processed as a bag of sectors.
MEDIA_TYPE_BLURAY_IMAGE	12	A forensic copy of a BluRay disc in a file.
MEDIA_TYPE_BLURAY_FOLDER	13	A folder on a BluRay physically attached to the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_THUMB_DRIVE	14	A thumb drive attached to the loader machine processed as a bag of sectors.
MEDIA_TYPE_THUMB_DRIVE_IMAGE	15	A forensic copy of a thumb drive in a file.
MEDIA_TYPE_THUMB_DRIVE_FOLDER	16	A thumb drive mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_SIM_CARD	17	A SIM card attached to the loader machine.
MEDIA_TYPE_SIM_CARD_IMAGE	18	A forensic copy of a SIM card in a file.
MEDIA_TYPE_SIM_CARD_FOLDER	19	A SIM card mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_PHYSICAL_SD_CARD	20	An SD card attached to the loader machine.
MEDIA_TYPE_SD_CARD_IMAGE	21	A forensic copy of an SD card in a file.
MEDIA_TYPE_SD_CARD_FOLDER	22	An SD card mounted as a folder on the loader machine. Truxton relied on the host operating system to interpret the file system on the media.
MEDIA_TYPE_RAM	23	A dump of memory.
MEDIA_TYPE_FLOPPY_DISK_IMAGE	24	A forensic copy of a floppy diskette.
MEDIA_TYPE_FLASH	25	A dump of flash memory chips.
MEDIA_TYPE_GPS	26	A dump of a GPS device.
MEDIA_TYPE_TAR	27	A TAR file.
MEDIA_TYPE_RAR	28	A RAR file.
MEDIA_TYPE_ZIP	29	A ZIP file.
MEDIA_TYPE_FORENSIC_DATA	30	Data pulled from evidence by forensic technicians.
MEDIA_TYPE_ASSOCIATED_DATA	31	Data relevant to the case but doesn't come from seized media such as photos of the media, crime scene, etc.
MEDIA_TYPE_PHONE	32	A dump of a phone.
MEDIA_TYPE_TABLET	33	A dump of a tablet.
MEDIA_TYPE_PHYSICAL_ITEMS	34	Non-digital evidence collected from the crime scene such as pieces of paper, writing on a wall, etc.
MEDIA_TYPE_OSINT	35	This media contains files curated by an analyst to correlate with seized media.
MEDIA_TYPE_VEHICLE	36	This media contains data extracted from a vehicle.
MEDIA_TYPE_S3	37	An Amazon S3 bucket.
MEDIA_TYPE_ABORT_LOAD	32749	A request has been made to abort any loading of this media.