Difference between revisions of "Hfind"
From SleuthKitWiki
m (Added informer link.) |
|||
| Line 6: | Line 6: | ||
* [http://www.sleuthkit.org/informer/sleuthkit-informer-6.html#hashes Sleuth Kit Informer #6] | * [http://www.sleuthkit.org/informer/sleuthkit-informer-6.html#hashes Sleuth Kit Informer #6] | ||
* [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page] | * [http://www.sleuthkit.org/sleuthkit/man/hfind.html Automatically Updated man Page] | ||
| + | * Version 4.2 of The Sleuth Kit adds a SQLite database. See documentation for the [[HashDB Schema]] | ||
Latest revision as of 21:06, 11 February 2014
Back to Help Documents
hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.
- Sleuth Kit Informer #6
- Automatically Updated man Page
- Version 4.2 of The Sleuth Kit adds a SQLite database. See documentation for the HashDB Schema
