Table 3-1 File Scan Summary Entries Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_time |
datetime2(3) |
timestamp without time zone |
Time when file content was scanned |
fullpath |
nvarchar(max) |
text |
Full UNC path to the file |
fullpath_hash |
binary(20) |
bytea |
SHA-1 hash of lowercase fullpath |
content_hash |
binary(32) |
bytea |
SHA-2 hash of file content |
size |
bigint |
bigint |
File size |
modify_time |
datetime2(2) |
timestamp without time zone |
Last write time of file |
classification |
nvarchar(64) |
varchar(64) |
Classification name |
category |
nvarchar(64) |
varchar(64) |
Category name |
search_pattern_name |
nvarchar(64) |
varchar(64) |
Search pattern name |
search_pattern_string |
nvarchar(1024) |
varchar(1024) |
Search pattern string |
match_count |
int |
int |
Number of matches for Search Pattern on this path |
match_confidence |
int |
int |
|
job_id |
int |
int |
File content scan job ID |
job_definition |
nvarchar(64) |
varchar(64) |
Job definition name |
status_code |
int |
int |
Processing status code for this file entry |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
item_type |
int |
int |
|
item_type_name |
nvarchar(32) |
varchar(32) |
item type description |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_id |
bigint |
bigint |
Reference to primary key in ms365.drive_scans |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
ms365_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated drive |
ms365_parent_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for parent path |
created_by |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated identity |
create_time |
datetime2(3) |
timestamp |
Create time for entry |
item_type |
int |
int |
|
file_hash |
varbinary(64) |
bytea |
Files only - QuickXorHash of entry See: https://docs.microsoft.com/en-us/graph/api/resources/hashes?view=graph-rest-1.0 |
child_count |
bigint |
bigint |
Folders only – number of child entries in the folder (only includes one level deep, not recursive) |
modified_by |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated identity |
modify_time |
datetime2(3) |
timestamp |
Last modified time |
name |
nvarchar(256) |
varchar(256) |
Name of entry |
file_extension |
nvarchar(32) |
varchar(32) |
File name extension |
size |
bigint |
bigint |
Size in bytes |
web_url |
nvarchar(max) |
text |
Full path to item |
web_url_hash |
varbinary(32) |
bytea |
sha-256 hash of web_url |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
drive_id |
bigint |
bigint |
Reference to primary key in ms365.drives |
scan_status |
int |
int |
|
scan_state |
int |
int |
|
delegated_time |
datetime2(3) |
timestamp |
Time at which scan was requested |
start_time |
datetime2(3) |
timestamp |
Time when scan started |
stop_time |
datetime2(3) |
timestamp |
Time when scan stopped |
scan_progress_data |
nvarchar(max) |
text |
JSON data with scan progress details |
agent_name |
nvarchar(256) |
varchar(256) |
Name of Agent365 server performing the scan |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
scan_id |
bigint |
bigint |
Reference to primary key in ms365.drive_scans |
start_time |
datetime2(3) |
timestamp |
Drive scan start time |
stop_time |
datetime2(3) |
timestamp |
Drive scan stop time |
drive_id |
bigint |
bigint |
Reference to primary key in ms365.drives |
drive_name |
nvarchar(256) |
varchar(256) |
Drive name |
web_url |
nvarchar(max) |
text |
Full path to drive |
ms365_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
scan_progress_status |
nvarchar(max) |
text |
JSON data with scan progress details |
agent_name |
nvarchar(256) |
varchar(256) |
Name of Agent365 server that performed the scan |
scan_status |
int |
int2 = Completed |
|
scan_state |
int |
int |
|
result_string |
nvarchar(max) |
text |
Success or error message |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants table |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
name |
nvarchar(256) |
varchar(256) |
Drive name |
ms365_owner_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
quota |
nvarchar(256) |
varchar(256) |
JSON data including quota details |
web_url |
nvarchar(max) |
text |
Full web path to drive |
drive_type |
nvarchar(64) |
varchar(64) |
Known values in MS GraphAPI include
See: https://docs.microsoft.com/en-us/graph/api/resources/drive?view=graph-rest-1.0 |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_group_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated group |
ms365_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated drive |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
member_type |
int |
int |
|
member_type_name |
nvarchar(32) |
varchar(32) |
Member type description |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_group_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated group |
ms365_member_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated member |
member_type |
int |
int |
|
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_group_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated group |
ms365_site_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated SharePoint site |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
display_name |
nvarchar(256) |
varchar(256) |
Friendly name of group |
group_types |
nvarchar(64) |
varchar(64) |
One or more of the following from MS GraphAPI:
See: https://docs.microsoft.com/en-us/graph/api/resources/group?view=graph-rest-1.0 |
onprem_sid |
varbinary(68) |
bytea |
On-premises Security Identifier (SID) |
onprem_dnsdomain |
nvarchar(256) |
varchar(256) |
On-premises DNS domain |
onprem_netbios |
nvarchar(256) |
varchar(256) |
On-premises NetBIOS domain |
onprem_samaccount |
nvarchar(256) |
varchar(256) |
On-premises SAM Account Name |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
identity_type |
int |
int |
|
identity_type_name |
nvarchar(32) |
varchar(32) |
Identity type description |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
int |
int |
Primary key |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
start_time |
datetime2(3) |
timestamp |
Time job started |
stop_time |
datetime2(3) |
timestamp |
Time job stopped |
job_status |
int |
int |
|
job_progress_data |
nvarchar(max) |
text |
JSON data with job progress details |
agent_name |
nvarchar(256) |
varchar(256) |
Agent365 server performing the scan |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
int |
int |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
tenant_name |
nvarchar(256) |
varchar(256) |
Associated *.onmicrosoft.com tenant name |
start_time |
datetime2(3) |
timestamp |
Time when job started |
stop_time |
datetime2(3) |
timestamp |
Time when job stopped |
job_status |
int |
int |
|
result_string |
nvarchar(1024) |
varchar(1024) |
Success or failure message |
job_progress_data |
nvarchar(max) |
text |
JSON data with job progress details |
agent_name |
nvarchar(256) |
varchar(256) |
Agent365 server performing the scan |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_id |
bigint |
bigint |
Reference to primary key in ms365.drive_scans |
drive_item_id |
bigint |
bigint |
Reference to primary key in ms365.drive_items |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
expire_time |
datetime2(3) |
timestamp |
Timestamp when link expires |
is_inherited |
bit |
boolean |
|
has_password |
bit |
boolean |
This currently applies only to Anonymous sharing links |
grantedto_id_type |
nvarchar(64) |
varchar(64) |
One of:
|
grantedto_ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated trustee |
grantedto_display_name |
nvarchar(256) |
varchar(256) |
Friendly name of trustee |
invite_email |
nvarchar(256) |
varchar(256) |
Email address of recipient (trustee) |
invite_sentby_ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated sender |
invite_sentby_display_name |
nvarchar(256) |
varchar(256) |
Friendly name of sender |
invite_signin_required |
bit |
boolean |
|
link_app_display_name |
nvarchar(256) |
varchar(256) |
Friendly name of application |
link_app_ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated application |
link_type |
nvarchar(32) |
varchar(32) |
One of:
See: https://docs.microsoft.com/en-us/graph/api/resources/sharinglink?view=graph-rest-1.0 |
link_scope |
nvarchar(32) |
varchar(32) |
One of the following from MS GraphAPI:
See: https://docs.microsoft.com/en-us/graph/api/resources/sharinglink?view=graph-rest-1.0 |
link_prevents_download |
bit |
boolean |
true = view only (download not allowed) |
roles |
nvarchar(128) |
varchar(128) |
One of the following from MS GraphAPI:
See: https://docs.microsoft.com/en-us/graph/api/resources/permission?view=graph-rest-1.0 |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
permission_id |
bigint |
bigint |
Reference to primary key in ms365.permissions |
scan_id |
bigint |
bigint |
Reference to primary key in ms365.drive_scans |
display_name |
nvarchar(256) |
varchar(256) |
Friendly name of member |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated member |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_site_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated SharePoint site |
ms365_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated drive |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
ms365_parent_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated parent site |
display_name |
nvarchar(256) |
varchar(256) |
Friendly name of SharePoint site |
name |
nvarchar(256) |
varchar(256) |
Site name |
is_root |
bit |
boolean |
|
web_url |
nvarchar(max) |
text |
Full path to SharePoint site |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
team_id |
bigint |
bigint |
Reference to primary key in ms365.teams |
display_name |
nvarchar(256) |
varchar(256) |
Friendly name of channel |
web_url |
nvarchar(256) |
varchar(256) |
Full path to channel |
ms365_files_folder_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated path |
ms365_files_folder_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated path’s drive |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
display_name |
nvarchar(256) |
varchar(256) |
Friendly name of team |
visibility |
int |
int |
|
web_url |
nvarchar(max) |
text |
Full path to team |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
int |
int |
Primary key |
tenant_name |
nvarchar(256) |
varchar(256) |
Official registered tenant name ending with ‘.onmicrosoft.com’ |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
display_name |
nvarchar(256) |
varchar(256) |
Tenant display name |
default_name |
nvarchar(256) |
varchar(256) |
Optionally registered DNS name set as the “default” e.g. corp.example.com |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_user_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated user |
ms365_drive_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI for associated drive |
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
job_id |
int |
int |
Reference to primary key in ms365.jobs |
tenant_id |
int |
int |
Reference to primary key in ms365.tenants |
last_update |
datetime2(3) |
timestamp |
Last update time for database entry |
ms365_id |
nvarchar(256) |
varchar(256) |
Unique id provided by MS GraphAPI |
display_name |
nvarchar(256) |
varchar(256) |
Display name – typically First Last name |
upn |
nvarchar(1024) |
varchar(1024) |
User Principal Name |
given_name |
nvarchar(64) |
varchar(64) |
First name |
surname |
nvarchar(64) |
varchar(64) |
Last name |
onprem_sid |
varbinary(68) |
bytea |
On-premises Security Identifier (SID) |
onprem_dn |
nvarchar(max) |
text |
On-premises distinguished name |
onprem_upn |
nvarchar(1024) |
varchar(1024) |
On-premises User Principal Name |
onprem_dnsdomain |
nvarchar(256) |
varchar(256) |
On-premises DNS domain name |
onprem_samaccount |
nvarchar(256) |
varchar(256) |
On-premises SAM Account Name |
onprem_immutable_id |
nvarchar(256) |
varchar(256) |
Unique id mapping synced on-prem user to associated MS365 user |
account_enabled |
bit |
boolean |
Account is enabled |
user_type |
nvarchar(64) |
varchar(64) |
Known values from MS GraphAPI include:
See: https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0 |
creation_type |
nvarchar(64) |
varchar(64) |
Known values from MS GraphAPI include:
See: https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0 |
Table 3-2 Active Directory Memberships Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
group_id |
integer |
integer |
|
member_id |
integer |
integer |
|
Table 3-3 Active Directory Objects Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
integer |
integer |
Primary key |
name |
nvarchar(256) |
varchar(256) |
SAM Account Name |
fdn |
nvarchar(512) |
varchar(512) |
Full distinguished object name |
domain |
nvarchar(256) |
varchar(256) |
Domain name |
guid |
binary(16) |
bytea |
Globally Unique Identifier |
sid |
varbinary(68) |
bytea |
Security Identifier |
object_type |
integer |
integar |
|
identity_system_id |
integer |
integer |
Reference to primary key of identity systems table |
Table 3-4 Identity Systems Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
integer |
integer |
Primary key |
type |
integer |
integer |
|
name |
nvarchar(256) |
varchar(256) |
|
domain |
nvarchar(256) |
varchar(256) |
Active Directory domain |
proxy_account |
nvarchar(256) |
varchar(256) |
|
is_primary |
bit |
boolean |
|
is_managed |
bit |
boolean |
|
last_modified |
datetime2(0) |
timestamp without timezone |
|
Table 3-5 NTFS ACEs Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_data_id |
bigint |
bigint |
Reference to scan_data table |
flags |
smallint |
smallint |
|
ace_type |
smallint |
smallint |
|
access_mask |
integer |
integer |
|
sid |
varbinary(68) |
bytea |
Trustee SID |
index_on_disk |
smallint |
smallint |
Discovered order of this ACE for the associated entry as read from the file system |
canonical_index |
smallint |
smallint |
Preferred order in which ACE should appear for the associated entry |
Table 3-6 Scans Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_policy_id |
integer |
integer |
Reference to scan_policies table |
triggered_start_time |
datetime2(3) |
timestamp without time zone |
Initial time scan delegation starts |
scan_start_time |
datetime2(3) |
timestamp without time zone |
Start time when agent begins physical scan |
scan_stop_time |
datetime2(3) |
timestamp without time zone |
Stop time when agent completes physical scan |
enum_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to file system object enumeration |
enum_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to file system object enumeration |
enum_file_count |
integer |
integer |
Agent metrics related to file system object enumeration |
enum_directory_count |
integer |
integer |
Agent metrics related to file system object enumeration |
enum_link_count |
integer |
integer |
Agent metrics related to file system object enumeration |
caching_start_time |
datetime2(3) |
timestamp without time zone |
Metrics related to agent caching |
caching_stop_time |
datetime2(3) |
timestamp without time zone |
Metrics related to agent caching |
cached_file_count |
integer |
integer |
Metrics related to agent caching |
cached_directory_count |
integer |
integer |
Metrics related to agent caching |
cached_link_count |
integer |
integer |
Metrics related to agent caching |
cache_size |
integer |
integer |
Metrics related to agent caching |
cache_size_max |
integer |
integer |
Metrics related to agent caching |
metadata_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to filesystem metadata collection |
metadata_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to filesystem metadata collection |
metadata_file_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
metadata_directory_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
metadata_link_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
accounts_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to security principal collection |
accounts_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to security principal collection |
accounts_object_count |
integer |
integer |
Agent metrics related to security principal collection |
transfer_start_time |
datetime2(3) |
timestamp without time zone |
Related to transfer of scan file from the Agent to the Engine |
transfer_stop_time |
datetime2(3) |
timestamp without time zone |
Related to transfer of scan file from the Agent to the Engine |
db_start_time |
datetime2(3) |
timestamp without time zone |
Database insert start time* |
db_stop_time |
datetime2(3) |
|
Database insert stop time* |
scan_type |
integer |
integer |
|
scan_target_id |
integer |
integer |
Reference to scan_targets table |
local_identity_system_id |
integer |
integer |
|
retry_count |
integer |
integer |
Current number of scan attempts |
status_code |
integer |
integer |
Internal status code |
error_string |
nvarchar(1024) |
varchar(1024) |
|
progress_status |
integer |
integer |
|
next_retry_time |
datetime2(0) |
timestamp without time zone |
Next scheduled time to retry a failed scan |
ntfs_abe_enabled |
bit |
boolean |
Flag indicating that the Windows share has ABE enabled |
is_valid |
bit |
boolean |
[Deprecated] |
agent_name |
nvarchar(256) |
varchar(256) |
|
* Database insert times do not include security equivalence, group membership, or eDirectory Directory Service trustee processing, all of which runs in the background.
Table 3-7 Scan Data Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_id |
integer |
integer |
Reference to scans table |
path_type |
integer |
integer |
|
is_link |
bit |
boolean |
Flag indicating entry is a link (symlink, hardlink, etc.) |
name |
nvarchar(256) |
varchar(256) |
File or directory name |
fullpath |
nvarchar(max) |
text |
Full UNC path to the file system entry |
fullpath_hash |
binary(20) |
bytea |
SHA-1 hash of lowercase fullpath |
filename_extension |
nvarchar(32) |
varchar(32) |
Extensions having more than 32 characters are treated as if they have none |
owner_id |
varbinary(68) |
bytea |
Maps to either a GUID or a SID |
attributes |
integer |
integer |
|
create_time |
datetime2(0) |
timestamp without time zone |
|
modify_time |
datetime2(0) |
timestamp without time zone |
|
access_time |
datetime2(0) |
timestamp without time zone |
|
size |
bigint |
bigint |
For files, actual size; for directories, accumulative size of all subordinate files |
size_on_disk |
bigint |
bigint |
Assumes typical allocation unit size of 4K |
size_compressed |
bigint |
bigint |
Only accurate for NTFS file systems |
idx |
integer |
integer |
Scan index; unique per scan |
parent_idx |
integer |
integer |
Parent index. Used for hierarchical relation processing |
path_depth |
integer |
integer |
Entry depth with respect to the scan target’s root path |
ns_left |
integer |
integer |
Nested-set Left index – used for hierarchical relation processing |
ns_right |
integer |
integer |
Nested-set Right index – used for hierarchical relation processing |
status_code |
integer |
integer |
|
Table 3-8 Scan Directory Data Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_data_id |
bigint |
bigint |
Reference to scan_data table |
file_count |
integer |
integer |
Count of all files subordinate to this directory |
directory_count |
integer |
integer |
Count of all subdirectories |
directory_quota |
bigint |
bigint |
Directory quota for this directory |
directory_quota_flags |
integer |
integer |
|
child_file_count |
integer |
integer |
Count of all immediately subordinate files |
child_link_count |
integer |
integer |
Count of all immediately subordinate links |
child_directory_count |
integer |
integer |
Count of all immediately subordinate directories |
child_size |
bigint |
bigint |
Size of all immediately subordinate files |
child_size_on_disk |
bigint |
bigint |
Size on disk of all immediately subordinate files (assumes 4K allocation size) |
child_size_compressed |
bigint |
bigint |
Size on disk of all immediately subordinate compressed files (only accurate with NTFS) |
child_link_size |
bigint |
bigint |
Size of all immediately subordinate links |
Table 3-9 Scan History Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
integer |
integer |
Primary key |
identity_system |
nvarchar(256) |
text |
Identity system associated with this scan target |
scan_target |
nvarchar(1024) |
text |
UNC path of scan target |
file_size |
bigint |
bigint |
Total aggregate size of all files |
file_count |
integer |
integer |
Total count of all files |
directory_count |
integer |
integer |
Total count of all directories |
scan_policy_name |
nvarchar(64) |
varchar(64) |
Scan policy associated with this scan |
agent_name |
nvarchar(256) |
text |
|
scan_id |
integer |
integer |
Scan ID |
scan_type |
integer |
integer |
|
triggered_start_time |
datetime2(3) |
timestamp without time zone |
Initial time scan delegation starts |
scan_start_time |
datetime2(3) |
timestamp without time zone |
Start time when agent begins physical scan |
scan_stop_time |
datetime2(3) |
timestamp without time zone |
Stop time when agent completes physical scan |
enum_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to file system object enumeration |
enum_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to file system object enumeration |
enum_file_count |
integer |
integer |
Agent metrics related to file system object enumeration |
enum_directory_count |
integer |
integer |
Agent metrics related to file system object enumeration |
enum_link_count |
integer |
integer |
Agent metrics related to file system object enumeration |
caching_start_time |
datetime2(3) |
timestamp without time zone |
Metrics related to agent caching |
caching_stop_time |
datetime2(3) |
timestamp without time zone |
Metrics related to agent caching |
cached_file_count |
integer |
integer |
Metrics related to agent caching |
cached_directory_count |
integer |
integer |
Metrics related to agent caching |
cached_link_count |
integer |
integer |
Metrics related to agent caching |
cache_size |
integer |
integer |
Metrics related to agent caching |
cache_size_max |
integer |
integer |
Metrics related to agent caching |
metadata_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to filesystem metadata collection |
metadata_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to filesystem metadata collection |
metadata_file_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
metadata_directory_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
metadata_link_count |
integer |
integer |
Agent metrics related to filesystem metadata collection |
accounts_start_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to security principal collection |
accounts_stop_time |
datetime2(3) |
timestamp without time zone |
Agent metrics related to security principal collection |
accounts_object_count |
integer |
integer |
Agent metrics related to security principal collection |
transfer_start_time |
datetime2(3) |
timestamp without time zone |
Related to transfer of scan file from the Agent to the Engine |
transfer_stop_time |
datetime2(3) |
timestamp without time zone |
Related to transfer of scan file from the Agent to the Engine |
db_start_time |
datetime2(3) |
timestamp without time zone |
Database insert start time* |
db_stop_time |
datetime2(3) |
|
Database insert stop time* |
status_code |
integer |
integer |
Internal status code |
error_string |
nvarchar(1024) |
varchar(1024) |
|
Table 3-10 Scan Targets Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
network_path |
nvarchar(256) |
varchar(256) |
Root path for scan target |
network_path_lower |
nvarchar(256) |
[ Not applicable ] |
Computed column |
server |
nvarchar(256) |
varchar(256) |
|
identity_system_id |
integer |
integer |
Reference to identity_systems table |
platform |
smallint |
smallint |
|
filesystem |
smallint |
smallint |
|
cost_per_unit |
money |
money |
Not currently used |
Table 3-11 Security Descriptors Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
bigint |
bigint |
Primary key |
scan_data_id |
bigint |
bigint |
Reference to scan data table |
control |
integer |
integer |
Security descriptor control flags |
dacl_present |
bit |
boolean |
Indicates presence of DACL entries for this security descriptor |
sacl_present |
bit |
boolean |
Indicates presence of SACL entries for this security descriptor |
Table 3-12 Trend Volume Freespace Table Definition
Column Name |
SQL Server Data Type |
PostgreSQL Data Type |
Notes |
---|---|---|---|
id |
integer |
integer |
Primary key |
scan_id |
integer |
integer |
Scan ID |
identity_system |
nvarchar(256) |
text |
|
network_path |
nvarchar(max) |
text |
Scan target path |
server |
nvarchar(256) |
text |
|
filesystem |
integer |
integer |
|
volume_guid |
uniqueidentifier |
uuid |
|
volume_label |
nvarchar(256) |
text |
|
volume_bytes_total |
bigint |
bigint |
|
volume_bytes_free |
bigint |
bigint |
|
volume_bytes_used |
bigint |
bigint |
|
allocation_unit_size |
integer |
integer |
|
allocation_units_total |
bigint |
bigint |
|
allocation_units_free |
bigint |
bigint |
|
allocation_units_used |
bigint |
bigint |
|
status |
integer |
integer |
|
scan_time |
datetime2(0) |
timestamp without time zone |
|