forensic-hashdb 0.2.0

File hash databases for digital forensics — NSRL/CIRCL known-good, malware known-bad, known-vulnerable Windows drivers (loldrivers), and analyst-supplied MD5/SHA1/SHA256 feeds.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

//! forensic-hashdb — zero-FP file hash databases for digital forensic investigation.
//!
//! Three databases:
//! - [`known_good`] — exact matching against NSRL/CIRCL known-legitimate files (zero false positives)
//! - [`known_bad`]  — provenance-tracked malware hash lookup (MalwareBazaar, VirusShare, etc.)
//! - [`lol_drivers`] — embedded known-vulnerable Windows driver hashes (loldrivers.io)
//! - [`feed`] — analyst-supplied multi-algorithm (MD5/SHA1/SHA256) hash feeds loaded from text/CSV

pub mod feed;
pub mod known_bad;
pub mod known_good;
pub mod lol_drivers;
mod types;

pub use types::{BadFileInfo, BadFileSource, DriverInfo};