hash¶
Filesystem hash data.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: hash
- Windows
- Linux
- Mac OSX
- Free BSD
Table schema¶
Name | Type | Description |
---|---|---|
path | TEXT | Must provide a path or directory |
directory | TEXT | Must provide a path or directory |
md5 | TEXT | MD5 hash of provided filesystem data |
sha1 | TEXT | SHA1 hash of provided filesystem data |
sha256 | TEXT | SHA256 hash of provided filesystem data |
ssdeep | TEXT | ssdeep hash of provided filesystem data |
Query examples¶
select * from hash where path = '/etc/passwd'
select * from hash where directory = '/etc/'