Filesystem hash data.
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error:
no such table: hash
- Mac OSX
- Free BSD
|path||TEXT||Must provide a path or directory|
|directory||TEXT||Must provide a path or directory|
|md5||TEXT||MD5 hash of provided filesystem data|
|sha1||TEXT||SHA1 hash of provided filesystem data|
|sha256||TEXT||SHA256 hash of provided filesystem data|
|ssdeep||TEXT||ssdeep hash of provided filesystem data|
select * from hash where path = '/etc/passwd'
select * from hash where directory = '/etc/'