Crate forensic_hashdb 

forensic-hashdb — zero-FP file hash databases for digital forensic investigation.

Three databases:

• known_good — exact matching against NSRL/CIRCL known-legitimate files (zero false positives)
• known_bad — provenance-tracked malware hash lookup (MalwareBazaar, VirusShare, etc.)
• lol_drivers — embedded known-vulnerable Windows driver hashes (loldrivers.io)
• feed — analyst-supplied multi-algorithm (MD5/SHA1/SHA256) hash feeds loaded from text/CSV

Modules

feed

Analyst-supplied hash feeds — the ad-hoc counterpart to the curated DBs.

known_bad

known_good

lol_drivers

Structs

BadFileInfo

Provenance record for a known-bad file hash.

DriverInfo

A known-vulnerable or known-malicious Windows driver.

Enums

BadFileSource

Source database a known-bad hash came from.