Hfind

Back to Help Documents

hfind looks up hash values in a database using a binary search algorithm. This allows one to easily create a hash database and identify if a file is known or not. It works with the NIST National Software Reference Library (NSRL) and the output of ’md5sum’.

• Sleuth Kit Informer #6
• Automatically Updated man Page
• Version 4.2 of The Sleuth Kit adds a SQLite database. See documentation for the HashDB Schema