Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'Toast' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType = 2
- UNION
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ExecuteOpen' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType = 5
- UNION
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'InFocus' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType = 6
- UNION
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ClipboardCopy' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType = 16 AND [GROUP] LIKE 'Copy'
- UNION
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'ClipboardPaste' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType = 16 AND [GROUP] LIKE 'Paste'
- UNION
- SELECT '{' || substr(HEX(Id), 7, 2) || substr(HEX(Id), 5, 2) || substr(HEX(Id), 3, 2) || substr(HEX(Id), 1, 2) || '-' || substr(HEX(Id), 11, 2) || substr(HEX(Id), 9, 2) || '-' || substr(HEX(Id), 15, 2) || substr(HEX(Id), 13, 2) || '-' || substr(HEX(Id), 17, 4) || '-' || substr(HEX(Id), 21, 12) || '}' AS 'Activity ID', datetime(CAST(StartTime AS INTEGER), 'unixepoch') AS 'Start Time', datetime(CAST(EndTime AS INTEGER), 'unixepoch') AS 'End Time', AppId AS 'App ID', AppActivityId AS 'App Activity ID', ActivityType AS 'Activity Type', 'Other' AS 'Activity Type As Text', [GROUP] AS 'Group', CAST(Payload AS TEXT) AS 'Payload' FROM Activity WHERE ActivityType NOT IN (2,5,6,16)
- ORDER BY [START TIME], [Activity ID] DESC
Add Comment
Please, Sign In to add comment