3.2 Views

3.2.1 SRS.CURRENT_FS_SCANDATA

Table 3-16 Current File System Scan Data Unified View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

  • SAM Account name for Active Directory
  • Common Name (CN) for eDirectory

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

  • For Active Directory – DOMAIN\SamAccountName
  • For eDirectory – FDN

owner_id

varbinary(68)

bytea

  • SID for Active Directory
  • GUID for eDirectory

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path.

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.2 SRS.CURRENT_FS_SCANDATA_AD

Table 3-17 Current File System Scan Data for Active Directory View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

 

 

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

SAM Account Name

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

owner_id

varbinary(68)

bytea

SID

ad_object_id

integer

integer

Reference to ad_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.3 SRS.CURRENT_FS_SCANDATA_EDIR

Table 3-18 Current File System Scan Data for eDirectory View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_name

nvarchar(256)

varchar(256)

Common Name (CN)

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

Full distinguished object name

owner_id

varbinary(68)

bytea

GUID

edir_object_id

integer

integer

Reference to edir_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.4 SRS.CURRENT_FS_SCANS

Table 3-19 Current File System Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

integer

integer

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

integer

integer

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 1

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

 

scan_target_id

integer

integer

 

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

is_valid

bit

boolean

[Deprecated]

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

file_count

integer

integer

Number of files in the scan

directory_count

integer

integer

Number of directories in the scan

link_count

integer

integer

Number of links (junctions, symbolic links, reparse points) in the scan

3.2.5 SRS.CURRENT_NCP_TRUSTEES

Table 3-20 Current NCP Trustees View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_name

nvarchar(256)

varchar(256)

Common Name (CN)

trustee_fdn

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_display_name

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

trustee_guid

varbinary(68)

bytea

GUID

rights

integer

integer

  • 0x01 = Read
  • 0x02 = Write
  • 0x04 = [undefined]
  • 0x08 = Create
  • 0x10 = Delete
  • 0x20 = Access Control
  • 0x40 = File Scan
  • 0x80 = Modify
  • 0x100 = Supervisor

rights_string

nvarchar(8)

varchar(8)

See srs.ncp_rights_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

edir_object_id

integer

integer

Reference to edir_objects table

3.2.6 SRS.CURRENT_NTFS_ACES

Table 3-21 Current NTFS ACEs View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_identity_system

nvarchar(256)

varchar(256)

Trustee’s Identity System name

trustee_domain

nvarchar(256)

varchar(256)

Trustee’s Active Directory domain

trustee_name

nvarchar(256)

varchar(256)

SAMAccount name

trustee_fdn

nvarchar(512)

varchar(512)

Full distinguished name

trustee_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

sid

varbinary(68)

bytea

 

access_mask

integer

integer

  • 0x1 = Read Data / List Directory
  • 0x2 = Write Data / Create File
  • 0x4 = Append Data / Create Subdirectory
  • 0x8 = Read Extended Attributes
  • 0x10 = Write Extended Attributes
  • 0x20 = File Execute / Traverse
  • 0x40 = Delete Child
  • 0x80 = Read Attributes
  • 0x100 = Write Attributes
  • 0x10000 = Delete
  • 0x20000 = Read Permissions
  • 0x40000 = Change Permissions
  • 0x80000 = Change Owner
  • 0x100000 = Synchronize
  • 0x1000000 = Access System Security
  • 0x10000000 = Generic All
  • 0x20000000 = Generic Execute
  • 0x40000000 = Generic Write
  • 0x80000000 = Generic Read

access_mask_string

nvarchar(128)

varchar(128)

See srs.access_mask_string

basic_permissions

nvarchar(128)

varchar(128)

See srs.access_mask_basic_string

ace_type

smallint

smallint

  • 0 = Access Allowed
  • 1 = Access Denied
  • 2 = System Audit
  • 9 = Allowed Callback
  • 10 = Denied Callback
  • 13 = System Audit Callback
  • 17 = System Mandatory Label

ace_type_string

nvarchar(128)

varchar(128)

See srs.ace_type_string

ace_flags

smallint

 

  • 0x1 = Object Inherit
  • 0x2 = Container Inherit
  • 0x4 = No Propagate
  • 0x8 = Inherit Only
  • 0x10 = Inherited
  • 0x40 = Successful Access
  • 0x80 = Failed Access

ace_flags_string

nvarchar(128)

varchar(128)

See srs.ace_flags_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

ad_object_id

integer

integer

Reference to ad_objects table

3.2.7 SRS.CURRENT_PERMISSIONS_SCANS

Table 3-22 Current Permissions Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

smallint

smallint

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

smallint

smallint

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 2

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

is_valid

bit

boolean

[Deprecated]

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

directory_count

integer

integer

Number of directories in the scan

3.2.8 SRS.PREVIOUS_FS_SCANDATA

Table 3-23 Previous File System Scan Data Unified View

Column Name

SQL Server Data Type

PostgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

  • SAM Account name for Active Directory
  • Common Name (CN) for eDirectory

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

  • For Active Directory – DOMAIN\SamAccountName
  • For eDirectory – FDN

owner_id

varbinary(68)

bytea

  • SID for Active Directory
  • GUID for eDirectory

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.9 SRS.PREVIOUS_FS_SCANDATA_AD

Table 3-24 Previous File System Scan Data for Active Directory View

Column Name

SQL Server Data Type

PostgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

 

 

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

SAM Account Name

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

owner_id

varbinary(68)

bytea

SID

ad_object_id

integer

integer

Reference to ad_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.10 SRS.PREVIOUS_FS_SCANDATA_EDIR

Table 3-25 Previous File System Scan Data for eDirectory View

Column Name

SQL Server Data Type

PostgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_name

nvarchar(256)

varchar(256)

Common Name (CN)

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

Full distinguished object name

owner_id

varbinary(68)

bytea

GUID

edir_object_id

integer

integer

Reference to edir_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.11 SRS.PREVIOUS_FS_SCANS

Table 3-26 Previous File System Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

integer

integer

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

integer

integer

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 1

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

 

scan_target_id

integer

integer

 

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

file_count

integer

integer

Number of files in the scan

directory_count

integer

integer

Number of directories in the scan

link_count

integer

integer

Number of links (junctions, symbolic links, reparse points) in the scan

3.2.12 SRS.PREVIOUS_NCP_TRUSTEES

Table 3-27 Previous NCP Trustees View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_name

nvarchar(256)

varchar(256)

Common Name (CN)

trustee_fdn

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_display_name

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

trustee_guid

varbinary(68)

bytea

GUID

rights

integer

integer

  • 0x01 = Read
  • 0x02 = Write
  • 0x04 = [undefined]
  • 0x08 = Create
  • 0x10 = Delete
  • 0x20 = Access Control
  • 0x40 = File Scan
  • 0x80 = Modify
  • 0x100 = Supervisor

rights_string

nvarchar(8)

varchar(8)

See srs.ncp_rights_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

edir_object_id

integer

integer

Reference to edir_objects table

3.2.13 SRS.PREVIOUS_NTFS_ACES

Table 3-28 Previous NTFS ACEs View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_identity_system

nvarchar(256)

varchar(256)

Trustee’s Identity System name

trustee_domain

nvarchar(256)

varchar(256)

Trustee’s Active Directory domain

trustee_name

nvarchar(256)

varchar(256)

SAMAccount name

trustee_fdn

nvarchar(512)

varchar(512)

Full distinguished name

trustee_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

sid

varbinary(68)

bytea

 

access_mask

integer

integer

  • 0x1 = Read Data / List Directory
  • 0x2 = Write Data / Create File
  • 0x4 = Append Data / Create Subdirectory
  • 0x8 = Read Extended Attributes
  • 0x10 = Write Extended Attributes
  • 0x20 = File Execute / Traverse
  • 0x40 = Delete Child
  • 0x80 = Read Attributes
  • 0x100 = Write Attributes
  • 0x10000 = Delete
  • 0x20000 = Read Permissions
  • 0x40000 = Change Permissions
  • 0x80000 = Change Owner
  • 0x100000 = Synchronize
  • 0x1000000 = Access System Security
  • 0x10000000 = Generic All
  • 0x20000000 = Generic Execute
  • 0x40000000 = Generic Write
  • 0x80000000 = Generic Read

access_mask_string

nvarchar(128)

varchar(128)

See srs.access_mask_string

basic_permissions

nvarchar(128)

varchar(128)

See srs.access_mask_basic_string

ace_type

smallint

smallint

  • 0 = Access Allowed
  • 1 = Access Denied
  • 2 = System Audit
  • 9 = Allowed Callback
  • 10 = Denied Callback
  • 13 = System Audit Callback
  • 17 = System Mandatory Label

ace_type_string

nvarchar(128)

varchar(128)

See srs.ace_type_string

ace_flags

smallint

 

  • 0x1 = Object Inherit
  • 0x2 = Container Inherit
  • 0x4 = No Propagate
  • 0x8 = Inherit Only
  • 0x10 = Inherited
  • 0x40 = Successful Access
  • 0x80 = Failed Access

ace_flags_string

nvarchar(128)

varchar(128)

See srs.ace_flags_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

ad_object_id

integer

integer

Reference to ad_objects table

3.2.14 SRS.PREVIOUS_PERMISSIONS_SCANS

Table 3-29 Previous Permissions Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

smallint

smallint

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

smallint

smallint

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 2

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

directory_count

integer

integer

Number of directories in the scan

3.2.15 SRS.BASELINE_FS_SCANDATA

Table 3-30 Baseline File System Scan Data Unified View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

  • SAM Account name for Active Directory
  • Common Name (CN) for eDirectory

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

  • For Active Directory – DOMAIN\SamAccountName
  • For eDirectory – FDN

owner_id

varbinary(68)

bytea

  • SID for Active Directory
  • GUID for eDirectory

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.16 SRS.BASELINE_FS_SCANDATA_AD

Table 3-31 Baseline File System Scan Data for Active Directory View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

 

 

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_identity_system

nvarchar(256)

varchar(256)

Owner’s Identity System name

owner_domain

nvarchar(256)

varchar(256)

Owner’s Active Directory domain

owner_name

nvarchar(256)

varchar(256)

SAM Account Name

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

owner_id

varbinary(68)

bytea

SID

ad_object_id

integer

integer

Reference to ad_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.17 SRS.BASELINE_FS_SCANDATA_EDIR

Table 3-32 Baseline File System Scan Data for eDirectory View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

name

nvarchar(256)

varchar(256)

File or directory name

filename_extension

nvarchar(32)

varchar(32)

File name extension

create_time

datetime2(0)

timestamp without time zone

Stored as UTC time

modify_time

datetime2(0)

timestamp without time zone

Stored as UTC time

access_time

datetime2(0)

timestamp without time zone

Stored as UTC time

size

bigint

bigint

For files, actual size; for directories, accumulative size of all subordinate files

size_on_disk

bigint

bigint

Assumes typical allocation unit size of 4K

size_compressed

bigint

bigint

Only accurate for NTFS file systems

owner_name

nvarchar(256)

varchar(256)

Common Name (CN)

owner_fdn

nvarchar(512)

varchar(512)

Full distinguished object name

owner_display_name

nvarchar(max)

text

Full distinguished object name

owner_id

varbinary(68)

bytea

GUID

edir_object_id

integer

integer

Reference to edir_objects table

attributes

integer

integer

  • 0x0 = None
  • 0x1 = Read Only
  • 0x2 = Archive
  • 0x4 = System
  • 0x8 = Hidden
  • 0x10 = Directory
  • 0x20 = Compressed
  • 0x40 = Offline
  • 0x80 = NTFS device
  • 0x100 = NTFS Normal
  • 0x200 = NTFS Temporary
  • 0x400 = NTFS Sparse File
  • 0x800 = NTFS Reparse Point
  • 0x1000 = NTFS Not content indexed
  • 0x2000 = NTFS Encrypted
  • 0x4000 = NTFS Virtual

attribute_string

nvarchar(256)

varchar(256)

See srs.attribute_string function

fullpath_hash

binary(20)

bytea

SHA-1 hash of lowercase fullpath

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

3.2.18 SRS.BASELINE_FS_SCANS

Table 3-33 Baseline File System Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

integer

integer

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

integer

integer

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 1

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

 

scan_target_id

integer

integer

 

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

file_count

integer

integer

Number of files in the scan

directory_count

integer

integer

Number of directories in the scan

link_count

integer

integer

Number of links (junctions, symbolic links, reparse points) in the scan

3.2.19 SRS.BASELINE_NCP_TRUSTEES

Table 3-34 Baseline NCP Trustees View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_name

nvarchar(256)

varchar(256)

Common Name (CN)

trustee_fdn

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_display_name

nvarchar(512)

varchar(512)

Trustee’s full distinguished name

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

trustee_guid

varbinary(68)

bytea

GUID

rights

integer

integer

  • 0x01 = Read
  • 0x02 = Write
  • 0x04 = [undefined]
  • 0x08 = Create
  • 0x10 = Delete
  • 0x20 = Access Control
  • 0x40 = File Scan
  • 0x80 = Modify
  • 0x100 = Supervisor

rights_string

nvarchar(8)

varchar(8)

See srs.ncp_rights_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

edir_object_id

integer

integer

Reference to edir_objects table

3.2.20 SRS.BASELINE_NTFS_ACES

Table 3-35 Baseline NTFS ACEs View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

fullpath

nvarchar(max)

text

Full UNC path to the file system entry

trustee_identity_system

nvarchar(256)

varchar(256)

Trustee’s Identity System name

trustee_domain

nvarchar(256)

varchar(256)

Trustee’s Active Directory domain

trustee_name

nvarchar(256)

varchar(256)

SAMAccount name

trustee_fdn

nvarchar(512)

varchar(512)

Full distinguished name

trustee_display_name

nvarchar(max)

text

DOMAIN\SAMAccount

trustee_type

integer

integer

  • 0 = Unknown / Other
  • 1 = User
  • 2 = Group
  • 3 = Computer
  • 4 = Container
  • 5 = Built-in domain
  • 6 = Organization
  • 7 = Organizational Unit
  • 8 = Locality
  • 9 = Domain DNS
  • 10 = Volume
  • 13 = Inet Org Person
  • 16 = Country
  • 17 = Tree Root
  • 18 = Dynamic Group
  • 20 = Alias
  • 21 = eDirectory Pseudo Security Principal

sid

varbinary(68)

bytea

 

access_mask

integer

integer

  • 0x1 = Read Data / List Directory
  • 0x2 = Write Data / Create File
  • 0x4 = Append Data / Create Subdirectory
  • 0x8 = Read Extended Attributes
  • 0x10 = Write Extended Attributes
  • 0x20 = File Execute / Traverse
  • 0x40 = Delete Child
  • 0x80 = Read Attributes
  • 0x100 = Write Attributes
  • 0x10000 = Delete
  • 0x20000 = Read Permissions
  • 0x40000 = Change Permissions
  • 0x80000 = Change Owner
  • 0x100000 = Synchronize
  • 0x1000000 = Access System Security
  • 0x10000000 = Generic All
  • 0x20000000 = Generic Execute
  • 0x40000000 = Generic Write
  • 0x80000000 = Generic Read

access_mask_string

nvarchar(128)

varchar(128)

See srs.access_mask_string

basic_permissions

nvarchar(128)

varchar(128)

See srs.access_mask_basic_string

ace_type

smallint

smallint

  • 0 = Access Allowed
  • 1 = Access Denied
  • 2 = System Audit
  • 9 = Allowed Callback
  • 10 = Denied Callback
  • 13 = System Audit Callback
  • 17 = System Mandatory Label

ace_type_string

nvarchar(128)

varchar(128)

See srs.ace_type_string

ace_flags

smallint

 

  • 0x1 = Object Inherit
  • 0x2 = Container Inherit
  • 0x4 = No Propagate
  • 0x8 = Inherit Only
  • 0x10 = Inherited
  • 0x40 = Successful Access
  • 0x80 = Failed Access

ace_flags_string

nvarchar(128)

varchar(128)

See srs.ace_flags_string

idx

integer

integer

Scan index; unique per scan

parent_idx

integer

integer

Parent index. Used for hierarchical relation processing

path_depth

integer

integer

Entry depth with respect to the scan target’s root path

ns_left

integer

integer

Nested-set Left index – used for hierarchical relation processing

ns_right

integer

integer

Nested-set Right index – used for hierarchical relation processing

scan_id

integer

integer

Reference to scans table

scan_data_id

bigint

bigint

Reference to scan_data table

path_type

integer

integer

  • 0 = Unknown
  • 1 = File
  • 2 = Directory
  • 3 = File Symbolic Link
  • 4 = Directory Symbolic Link
  • 5 = Junction
  • 6 = Mount Point
  • 7 = Share
  • 8 = Volume
  • 9 = DFS Link
  • 10 = DFS Folder
  • 11 = DFS Root
  • 12 = HSM Stub
  • 13 = Reparse Point Unknown
  • 17 = Single Instance Storage Stub
  • 18 = Named Stream

status_code

integer

integer

 

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

ad_object_id

integer

integer

Reference to ad_objects table

3.2.21 SRS.BASELINE_PERMISSIONS_SCANS

Table 3-36 Baseline Permissions Scans View

Column Name

SQL Server Data Type

PosgreSQL Data Type

Notes

id

bigint

bigint

Primary key

scan_id

integer

integer

Reference to scans table

identity_system

nvarchar(256)

varchar(256)

  • Identity system name
  • Active Directory – Forest FDN

  • eDirectory – Tree name

domain

nvarchar(256)

varchar(256)

Active Directory domain

server

nvarchar(256)

varchar(256)

Server name

scan_target

nvarchar(256)

varchar(256)

UNC root path for scan target

platform

smallint

smallint

  • 0 = Unknown
  • 1 = Windows
  • 2 = Linux
  • 3 = Novell

filesystem

smallint

smallint

  • 0 = Unknown
  • 1 = NTFS
  • 3 = NSS
  • 4 = TFS
  • 5 = Ext3
  • 6 = ReiserFS
  • 10 = Ext2
  • 11 = Ext4
  • 12 = Xfs
  • 13 = Ramdisk
  • 14 = Novell_VFS
  • 16 = Linux_generic
  • 17 = NFS

scan_type

integer

integer

Should always be 2

progress_status

integer

integer

  • -2 = Waiting for retry
  • -1 = Ready for cleanup
  • 0 = Waiting for delegation
  • 1 = Delegated / scan in progress
  • 2 = Scan file transfer in progress
  • 3 = Database update in progress
  • 4 = Current - scan process complete
  • 5 = Database update pending
  • 6 = Previous
  • 7 = Retained

identity_system_id

integer

integer

Reference to identity_systems table

scan_target_id

integer

integer

Reference to scan_targets table

status_code

integer

integer

 

ntfs_abe_enabled

bit

boolean

Flag indicating that the Windows share has ABE enabled

agent

nvarchar(256)

varchar(256)

Name of agent that performed the scan

directory_count

integer

integer

Number of directories in the scan