hashlookup-forensic-analyser
hashlookup-forensic-analyser copied to clipboard
hashlookup
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
This is not an easy suggestion and it may also introduce risks but having an option to get archived files to get extracted recursively & hashed, I thought could also...
Configuration of directories and filetype inclusion/exclusion to be analysed. Idea from @wachizungu.
Some attack techniques replace a 'known' file by another 'known' file, allowing them to exploit some processing flow that triggers the binary at the target location This kind of scenario...
Every file is being reported as unknown, even if it actually was found. I believe this is because the default `args.bloomfield_algorithm` is `"sha1"` but the key returned by CIRCL is...
Metadata
Owner
Metadata
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/