Database Tables

The Truxton database holds "hot" tables that are constantly written to as well as reference (read-only) tables.

Data Tables

These tables hold data gleaned from exploiting media.

• [Entity] also known as artifacts.
• [ETLRoute]
• [Event]
• [EXIF]
• [ExpandedFile]
• [File]
• [Location]
• [Relation]
• [USBDevice]
• [WebsiteVisit]

Reference Tables

These tables exist only to give meanings to magic values so humans can better comprehend it.

• [AlertStatus] gives meaning to integer values found in the [AlertStatusID] column of the [Alert] table.
• [BOLOStatus] gives meaning to integer values found in the [BOLOStatusID] column of the [BOLO] table.
• [ContentStatus] gives meaning to integer values found in the [ContentStatusID] column of the [File] table. These values are also defined constants.
• [DataType] gives meaning to integer values found in the [DataTypeID] column of the [Entity] table. These values are also defined constants.
• [EntityType] gives meaning to integer values found in the [EntityTypeID] column of the [Entity] table. These values are also defined constants.
• [InvestigationType] gives meaning to integer values found in the [InvestigationTypeID] column of the [Investigation] table. These values are also defined constants.
• [InvestigationStatus] gives meaning to integer values found in the [InvestigationStatusID] column of the [Investigation] table. These values are also defined constants.