Difference between revisions of "Hfind"
From SleuthKitWiki
(Added man page link.) |
m (Added informer link.) |
||
| Line 4: | Line 4: | ||
hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’. | hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’. | ||
<br /> | <br /> | ||
| − | + | * [http://www.sleuthkit.org/informer/sleuthkit-informer-6.html#hashes Sleuth Kit Informer #6] | |
* [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page] | * [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page] | ||
Revision as of 20:37, 11 September 2008
Back to Help Documents
hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.
