InstalledFileEvidence Table
InstalledFileEvidence
lists file evidence that has been installed on a computer.
Note: To cater for multi-tenant mode, this table may contain data for
multiple tenants. Access requires that the database
TenantID
has been set in the SQL Server
connection context information. That setting filters an underlying table to produce this
view of data for the single, selected tenant.
Database Column |
Details |
---|---|
FileEvidenceID
|
Type: integer. Key An identifier for a file evidence record. Foreign key to the |
ComplianceComputerID
|
Type: integer. Key The managed computer on which this evidence was found. Foreign key to the |
AccessModeID
|
Type: integer. Key The state an application was considered accessed. Foreign key to the |
IsProcessBasedScan
|
Type: boolean Indicates whether the resolved file evidence has come from a process-based scan. |