forensic_hashdb/lib.rs
1//! forensic-hashdb — zero-FP file hash databases for digital forensic investigation.
2//!
3//! Three databases:
4//! - [`known_good`] — exact matching against NSRL/CIRCL known-legitimate files (zero false positives)
5//! - [`known_bad`] — provenance-tracked malware hash lookup (MalwareBazaar, VirusShare, etc.)
6//! - [`lol_drivers`] — embedded known-vulnerable Windows driver hashes (loldrivers.io)
7//! - [`feed`] — analyst-supplied multi-algorithm (MD5/SHA1/SHA256) hash feeds loaded from text/CSV
8
9pub mod feed;
10pub mod known_bad;
11pub mod known_good;
12pub mod lol_drivers;
13mod types;
14
15pub use types::{BadFileInfo, BadFileSource, DriverInfo};