forensic-hashdb 0.1.0

File hash databases for digital forensics — NSRL/CIRCL known-good, malware known-bad, and known-vulnerable Windows drivers (loldrivers).
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13

//! forensic-hashdb — zero-FP file hash databases for digital forensic investigation.
//!
//! Three databases:
//! - [`known_good`] — exact matching against NSRL/CIRCL known-legitimate files (zero false positives)
//! - [`known_bad`]  — provenance-tracked malware hash lookup (MalwareBazaar, VirusShare, etc.)
//! - [`lol_drivers`] — embedded known-vulnerable Windows driver hashes (loldrivers.io)

pub mod known_bad;
pub mod known_good;
pub mod lol_drivers;
mod types;

pub use types::{BadFileInfo, BadFileSource, DriverInfo};