ImportedInstalledFileEvidence Table

The ImportedInstalledFileEvidence table holds a record of the file evidence that has been installed on a computer from the source connections.

Note: To cater for multi-tenant mode, this table may contain data for multiple tenants. Access requires that the database TenantID has been set in the SQL Server connection context information. That setting filters an underlying table to produce this view of data for the single, selected tenant.
Table 1. Database columns for ImportedInstalledFileEvidence table

Database Column

Details

ComplianceConnectionID

Type: integer. Key. Nullable

The identifier for a data source connection in the ComplianceConnection table.

ExternalID

Type: big integer. Key. Nullable

The identifier used in the source connection for the computer that the file evidence is installed on.

ExternalFileID

Type: big integer. Key. Nullable

The identifier used in the source connection for the file evidence.

ExternalFilePathID

Type: big integer. Key. Nullable

The identifier used in the source connection for the path of the file evidence.

IsProcessBasedScan

Type: boolean

Indicates whether the resolved file evidence has come from a process-based scan.

LastRunningTime

Type: datetime. Nullable

Indicates the last running time of the file evidence if it is process-based.