Difference between revisions of "Hfind"

From SleuthKitWiki
Jump to: navigation, search
(Added man page link.)
m (Added informer link.)
Line 4: Line 4:
 
hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.
 
hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.
 
<br />
 
<br />
 
+
* [http://www.sleuthkit.org/informer/sleuthkit-informer-6.html#hashes Sleuth Kit Informer #6]
 
* [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page]
 
* [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page]

Revision as of 20:37, 11 September 2008

Back to Help Documents


hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.