SQL Tables

All discovered USB, CDROM and file system events are saved in SQL table ARGSOFT_SE_FS_EVENT.

Column	Type	Size	Description
UUID	varchar	36	Unique identifier
CREATE_TIME	datetime		Record creation time
MODIFY_TIME	datetime		Record modification time
MACHINE	nvarchar	128	Workstation name
EVENT_TIME	datetime		Event time
DEVICE_TYPE	int		1 – USB 2 – CDROM Others – Fixed Hard Drives
OBJECT_TYPE	int		1 – Directory 2 – Device Others – Regular File
FILE_PATH	nvarchar	512	Path for the relevant file or folder
WHO	nvarchar	256	User that causes the event
OPERATION	int		1 – USB detached or CDROM ejected 2 – File created 3 – File deleted 4 – File renamed 5 – File changed Others – USB attached or CDROM loaded
OWNER	nvarchar	256	Who created this record
CRC_HIGH	int		Record CRC high dword
CRC_LOW	int		Record CRC low dword