Type Windows Activities

Details

Defined Constant	Type_Windows_Activities
File Type Value	914
Parent Type	SQLite
Carve	Yes
Format Details	Yes
MIME Type	application/x-sqlite3
Filename Extension	sqlite

Windows Activities

Description

Windows Activity Timeline Database

Truxton Exploiters

This file type is handled by the following ETLs:

• Expand

Items Produced

Truxton will extract the following from this file type:

• EVENT_TYPE_PROGRAM_EXECUTED
• Type_File_Details
• Type_SQLite_Sample
• Files

Details

• Windows Activities