IR icon indicating copy to clipboard operation
IR copied to clipboard

Consider adding file hashes to triage scripts

Open hiddenillusion opened this issue 10 years ago • 0 comments

not sure it's needed for triaging but if you only have one shot I guess it could be useful:

via Ian: for i in echo $PATH | sed "s/:/ /g"; do for j in ls $i/*; do echo hostname && md5sum $j && ls -l --time-style=iso $j| awk -v OFS=',' '{gsub(//.*//,"",$3); print $2,$3,$8,$1}'; done; done

Gets all the MD5s for files in PATH

hiddenillusion avatar Jun 29 '15 18:06 hiddenillusion