User contributions
Jump to navigation
Jump to search
- 05:37, 25 May 2023 diff hist +1 Python Sample Exploitation ETL →Code Walkthrough
- 22:14, 18 April 2022 diff hist +110 Python
- 14:53, 18 April 2022 diff hist +1 TruxtonLocation →Sample
- 17:12, 18 May 2020 diff hist +1,604 TruxtonService.xml →Configuration File
- 16:56, 18 May 2020 diff hist -8 Configuration System
- 16:49, 18 May 2020 diff hist +5,834 TruxtonService.xml
- 16:45, 18 May 2020 diff hist +1,163 N Resource Group Created page with "A Resource Group in Azure is way of grouping resources into a manageable set. The neat thing about a Resource Group is when you delete it, all resources get deleted too. It is..." current
- 16:45, 18 May 2020 diff hist +3,163 N Azure Log Analytics Created page with "==AKA== Log Analytics has also been known as: * Operational Insights * Monitor ==Creation== In order to begin playing with Azure Log Analytics, you must first create a Log A..."
- 16:44, 18 May 2020 diff hist +1,784 N Azure Created page with "Azure is Microsoft's cloud. '''NOTE''' We will use the [https://docs.microsoft.com/en-us/cli/azure/?view=azure-cli-latest Azure CLI] (Command Line Interface) for all example..."
- 16:43, 18 May 2020 diff hist +62 Developer's Guide →Code Dependencies
- 16:41, 18 May 2020 diff hist +8,091 N Vcpkg Created page with "[https://github.com/Microsoft/vcpkg vcpkg] is Microsoft's C++ package manager. It ships as source code that you build. It includes several tools such as: * [https://cmake.org/..."
- 16:41, 18 May 2020 diff hist -26 Developer's Guide →Code Dependencies
- 16:39, 18 May 2020 diff hist -170 Temporary Filenames
- 16:39, 18 May 2020 diff hist +394 N Temporary Filenames Created page with "Truxton follows a pattern when it has to create temporary files. {| class="wikitable" |- ! First Three Letters ! Author |- | style="text-align:center;" | CTS | [https://gith..."
- 16:38, 18 May 2020 diff hist +173 N TruxtonService.xml Created page with "This file contains the information for turning a machine into a Truxton Exploitation node. =Truxton Service= Checks once per minute to see if ETLs and Services are running."
- 16:37, 18 May 2020 diff hist +563 N VC Redistributables Created page with "Microsoft will periodically screw you by changing the contents of the DLLs that implement the C/C++ runtime. Typically, they will add a new critical DLL to the package. Since..." current
- 16:35, 18 May 2020 diff hist +10,112 N ETL Stages Created page with "=Explanation= ETL Stages are key to solving the problem of process coordination. The Truxton exploitation process was broken down into a series of steps. These steps are perfo..."
- 16:35, 18 May 2020 diff hist +254 N Time Epochs Created page with "Here's some of the time formats that Truxton can handle. =Apple Cocoa Core= [https://www.epochconverter.com/coredata Cocoa Core] is the number of seconds (32-bit value) since..."
- 16:34, 18 May 2020 diff hist +2,138 N Type Google Hangout Database Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Google_Hangout_Database</code> |- | File Type Value | 898 |- | Parent Type | Type_..."
- 16:33, 18 May 2020 diff hist +195 N SQLite Queries Created page with "Many man applications use SQLite to store important application information. This page lists the different queries Truxton uses to exploit them. * Type_Google_Hangout_Datab..."
- 16:32, 18 May 2020 diff hist +761 N File Format Research Created page with "When trying to figure out the type of a file... Here's some useful sites * [https://www.google.com/?tbm=pts Google Patent Search] * [https://github.com/zsx/ossbuild/blob/a510..."
- 16:31, 18 May 2020 diff hist +2,489 N Media Load Percentage Created page with "When media loads, we attempt to communicate an estimate of where in the process it is. We map this to a percentage but it is pretty horrible. {| class="wikitable" ! Percentag..."
- 16:31, 18 May 2020 diff hist +2,448 N Media Status Created page with "These defined constants represent the states of media in Truxton. {| class="wikitable" ! Name ! Value ! Meaning |- | <code>MEDIA_STATUS_UNKNOWN</code> | style="text-align:cen..."
- 16:30, 18 May 2020 diff hist +5,762 N Media Types Created page with "When Truxton stores media, you can assign a type of media to it. This allows the analyst to get more of a clue as to what they are looking at. This is stored in the <code>[Med..."
- 16:30, 18 May 2020 diff hist +2,245 N Origin Created page with "When Truxton stores files, it will tell you where the file came from. This is stored in the [Origin] column of the [File] table in the database. {| class="wikitable" ! Name !..."
- 16:30, 18 May 2020 diff hist +6,662 N Entity Types Created page with "This is an enumeration of the interesting tidbits of analytic value. {| class="wikitable" ! Name ! Value ! Meaning |- | <code>ENTITY_TYPE_UNKNOWN</code> | style="text-align:c..."
- 16:29, 18 May 2020 diff hist -950 DATA TYPE
- 16:29, 18 May 2020 diff hist +7,038 N DATA TYPE Created page with " Editing DATA TYPE Jump to navigation Jump to search This is an enumeration of the different ways of storing data in a byte stream. {| class="wikitable" ! Name ! Value ! Mean..."
- 16:28, 18 May 2020 diff hist +1,901 N Content Status Created page with "When Truxton processes the contents of a file, several things can happen. These defined constants represent the states of the contents of a file in Truxton. {| class="wikitab..."
- 16:28, 18 May 2020 diff hist +218 N Watch Desktop Logs Created page with "If you want to see what the desktop is logging as it runs, start Powershell, then: <syntaxhighlight lang="powershell"> Get-Content "$env:LOCALAPPDATA\probity\truxton\TruxtonCl..."
- 16:27, 18 May 2020 diff hist +20,146 N Configuration System Created page with "=Description= The way to communicate settings to Truxton is through a class called <code>Options</code>. This is an interpretation of the Ye Olde "Command Line Options" of wh..."
- 16:27, 18 May 2020 diff hist +5,833 N Load List Created page with "A load list is a simple text file that allows you to script the load process. These are usually used when you have many pieces of media to load on a single machine. You can li..."
- 16:26, 18 May 2020 diff hist +6,112 N TGUID Created page with "A TGUID (Truxton GUID) is a 128-bit identifier used throughout Truxton. It can be stored and interoperate with a [https://en.wikipedia.org/wiki/Universally_unique_identifier G..."
- 16:25, 18 May 2020 diff hist +1,142 N Depot Types Created page with "There are several types of depot files in Truxton. {| class="wikitable" ! Name ! Value ! Meaning |- | <code>DEPOT_TYPE_UNKNOWN</code> | style="text-align:center;" | 0 | The t..."
- 16:24, 18 May 2020 diff hist +5,167 N Depot Created page with "Truxton stores file contents in large files called depots. When you store a stream of bytes in a depot, the offset of the beginning of the stream in the depot and the depot le..."
- 16:24, 18 May 2020 diff hist -12 Developer's Guide →Truxton Stuff
- 16:22, 18 May 2020 diff hist +1,165 N Type Icing MMS SMS Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Icing_MMS_SMS</code> |- | File Type Value | 975 |- | Parent Type | Type_SQLite_Datab..."
- 16:21, 18 May 2020 diff hist +470 N Type Cygwin Symlink Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Cygwin_Symlink</code> |- | File Type Value | 976 |- | Parent Type | None |- | Carve |..."
- 16:21, 18 May 2020 diff hist +428 N Type MPEG4Video With DRM Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_MPEG4Video_With_DRM</code> |- | File Type Value | 978 |- | Parent Type | Type_MPEG4V..."
- 16:21, 18 May 2020 diff hist +439 N Type HEIF Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_HEIF</code> |- | File Type Value | 977 |- | Parent Type | MP4 |- |..."
- 16:19, 18 May 2020 diff hist +416 N Type XMP Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_XMP</code> |- | File Type Value | 551 |- | Parent Type | XML |- | Carve |..."
- 16:19, 18 May 2020 diff hist +402 N Type Base64 Encoded Data Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Base64_Encoded_Data</code> |- | File Type Value | 550 |- | Parent Type | Type_ASCII_..."
- 16:19, 18 May 2020 diff hist +397 N Type UUEncoded Data Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_UUEncoded_Data</code> |- | File Type Value | 549 |- | Parent Type | Type_ASCII_Text|..."
- 16:19, 18 May 2020 diff hist +455 N Type Credential History Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Credential_History</code> |- | File Type Value | 548 |- | Parent Type | None |- | Carv..."
- 16:18, 18 May 2020 diff hist +396 N Type ipconfig Report Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_ipconfig_Report</code> |- | File Type Value | 547 |- | Parent Type | Type_ASCII_Text..."
- 16:18, 18 May 2020 diff hist +440 N Type Chrome Extension Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Chrome_Extension</code> |- | File Type Value | 546 |- | Parent Type | None |- | Carve..."
- 16:18, 18 May 2020 diff hist +473 N Type CodeView Section Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_CodeView_Section</code> |- | File Type Value | 545 |- | Parent Type | None |- | Carve..."
- 16:18, 18 May 2020 diff hist +447 N Type Git Pack Index Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Git_Pack_Index</code> |- | File Type Value | 544 |- | Parent Type | None |- | Carve |..."
- 16:17, 18 May 2020 diff hist +424 N Type Git Pack Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Git_Pack</code> |- | File Type Value | 543 |- | Parent Type | None |- | Carve | No |-..."
- 16:17, 18 May 2020 diff hist +521 N Type Apple Core Audio Created page with "{| style="float:right;border:1px solid black" |+ Details | Defined Constant | <code>Type_Apple_Core_Audio</code> |- | File Type Value | 542 |- | Parent Type | None |- | Carve..."
