| action:ActionArgumentFacet |
| action:ActionEstimationFacet |
| action:ActionFrequencyFacet |
| analysis:AnalyticResultFacet |
|
|
|
|
| core:ConfidenceFacet |
| identity:IdentityFacet |
|
|
|
|
| location:GPSCoordinatesFacet |
| location:LatLongCoordinatesFacet |
| location:SimpleAddressFacet |
| observable:AccountAuthenticationFacet |
| observable:AccountFacet |
| observable:AlternateDataStreamFacet |
| observable:AndroidDeviceFacet |
| observable:AntennaFacet |
| observable:ApplicationAccountFacet |
| observable:ApplicationFacet |
| observable:ArchiveFileFacet |
| observable:AudioFacet |
| observable:AutonomousSystemFacet |
| observable:BrowserBookmarkFacet |
| observable:BrowserCookieFacet |
| observable:CalendarEntryFacet |
| observable:CalendarFacet |
| observable:CallFacet |
| ...ervable:CapturedTelecommunicationsInformationFacet |
| observable:CellSiteFacet |
| observable:CompressedStreamFacet |
| observable:ComputerSpecificationFacet |
| observable:ContactFacet |
|
|
|
|
| observable:ContactListFacet |
| observable:ContentDataFacet |
| observable:DataRangeFacet |
| observable:DefinedEffectFacet |
|
|
|
|
| observable:DeviceFacet |
| observable:DigitalAccountFacet |
| observable:DigitalAddressFacet |
|
|
|
|
| observable:DigitalSignatureInfoFacet |
| observable:DiskFacet |
| observable:DiskPartitionFacet |
| observable:DomainNameFacet |
| observable:EXIFFacet |
| observable:EmailAccountFacet |
| observable:EmailMessageFacet |
| observable:EncodedStreamFacet |
| observable:EncryptedStreamFacet |
| observable:EventRecordFacet |
| observable:ExtInodeFacet |
| observable:ExtractedStringsFacet |
| observable:FileFacet |
| observable:FilePermissionsFacet |
| observable:FileSystemFacet |
| observable:FragmentFacet |
| observable:GeoLocationEntryFacet |
| observable:GeoLocationLogFacet |
| observable:GeoLocationTrackFacet |
| observable:HTTPConnectionFacet |
| observable:ICMPConnectionFacet |
| observable:ImageFacet |
| observable:LibraryFacet |
| observable:MemoryFacet |
| observable:MessageFacet |
| observable:MessageThreadFacet |
| observable:MftRecordFacet |
| observable:MobileAccountFacet |
| observable:MobileDeviceFacet |
| observable:MutexFacet |
| observable:NTFSFileFacet |
| observable:NTFSFilePermissionsFacet |
| observable:NetworkConnectionFacet |
| observable:NetworkFlowFacet |
| observable:NetworkInterfaceFacet |
| observable:NoteFacet |
| observable:OnlineServiceFacet |
| observable:OperatingSystemFacet |
| observable:PDFFileFacet |
| observable:PathRelationFacet |
| observable:PhoneAccountFacet |
| observable:ProcessFacet |
| observable:ProfileFacet |
| observable:PropertiesEnumeratedEffectFacet |
| observable:RasterPictureFacet |
| observable:RecoveredObjectFacet |
| observable:SIMCardFacet |
| observable:SMSMessageFacet |
| observable:SQLiteBlobFacet |
| observable:SoftwareFacet |
| observable:StorageMediumFacet |
| observable:SymbolicLinkFacet |
| observable:TCPConnectionFacet |
| observable:TableFieldFacet |
| observable:TwitterProfileFacet |
| observable:UNIXAccountFacet |
| observable:UNIXFilePermissionsFacet |
| observable:UNIXProcessFacet |
| observable:UNIXVolumeFacet |
| observable:URLFacet |
| observable:URLHistoryFacet |
| observable:URLVisitFacet |
| observable:UserAccountFacet |
| observable:UserSessionFacet |
| observable:VolumeFacet |
| observable:WhoIsFacet |
| observable:WindowsAccountFacet |
| observable:WindowsActiveDirectoryAccountFacet |
| observable:WindowsComputerSpecificationFacet |
| observable:WindowsPEBinaryFileFacet |
| observable:WindowsPrefetchFacet |
| observable:WindowsProcessFacet |
| observable:WindowsRegistryHiveFacet |
| observable:WindowsRegistryKeyFacet |
| observable:WindowsServiceFacet |
| observable:WindowsTaskFacet |
| observable:WindowsThreadFacet |
| observable:WindowsVolumeFacet |
| observable:WirelessNetworkConnectionFacet |
| observable:X509CertificateFacet |
| observable:X509V3ExtensionsFacet |
| tool:BuildFacet |