Skip to content

Info

Evidence: Info
Description: Info
Category: System
Platform: esxi
Short Name: info
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No

Case information metadata tracks collection details, timestamps, tool versions, and case identifiers. This metadata provides provenance for collected evidence, establishes chain of custody, and documents the collection environment and methodology.

This collector gathers structured data about info.

FieldDescriptionExample
AccessTimeAccess Time2023-10-15 14:30:25+03:00
AccessCountAccess Count123
URLURLExample value
BrowserBrowserExample value
TitleTitleExample value
VisitDurationVisit DurationExample value
ReferrerReferrerExample value
TypedCountTyped Count123
IsHiddenIs Hiddentrue
TransitionTypeTransition TypeExample value
VisitIDVisit ID123
TransitionQualifiersTransition QualifiersExample value
UserUserExample value
ProfileProfileExample value
HistoryFilePathHistory File PathExample value

This collector captures case metadata including case ID, collection timestamp, collector version, operator information, target system details, and collection parameters used during evidence acquisition.

Case metadata ensures evidence integrity, establishes timeline accuracy, supports chain of custody documentation, and provides context for investigation reconstruction. Proper case information is essential for legal admissibility and forensic report generation.