sdckey

Activities Cache Query With Activity Type

Aug 18th, 2021 (edited)
354
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
SQL 4.23 KB | None | 0 0
  1. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'Toast' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType = 2
  2.  
  3. UNION
  4.  
  5. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ExecuteOpen' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType = 5
  6.  
  7. UNION
  8.  
  9. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'InFocus' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType = 6
  10.  
  11. UNION
  12.  
  13. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ClipboardCopy' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType = 16 AND [GROUP] LIKE 'Copy'
  14.  
  15. UNION
  16.  
  17. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ClipboardPaste' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType = 16 AND [GROUP] LIKE 'Paste'
  18.  
  19. UNION
  20.  
  21. SELECT  '{' ||  substr(HEX(Id), 7, 2)   || substr(HEX(Id), 5, 2)  ||  substr(HEX(Id), 3, 2)   || substr(HEX(Id), 1, 2)  || '-' ||  substr(HEX(Id), 11, 2)  || substr(HEX(Id), 9, 2)  || '-' ||  substr(HEX(Id), 15, 2)  || substr(HEX(Id), 13, 2) || '-' ||  substr(HEX(Id), 17, 4)  || '-' ||  substr(HEX(Id), 21, 12) ||  '}' AS 'Activity ID',  datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time',  datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time',  AppId AS 'App ID',  AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'Other' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM  Activity WHERE ActivityType NOT IN (2,5,6,16)
  22.  
  23. ORDER BY [START TIME], [Activity ID] DESC
Add Comment
Please, Sign In to add comment