New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Mature index capability for better hunting and discovery #1113

Open

mgreen27 opened this issue Jun 18, 2021 · 2 comments

Collaborator

mgreen27 commented Jun 18, 2021

I want to mature the index hash capability for discovery and hunting.

Adds include:

storing a file header (configurable)
storing hashes (configurable)
storing path
path whitelist
ongoing monitoring

Feel free to add some more ideas!

Contributor

clayscode commented Jun 23, 2021

Is this referring to this? https://github.com/Velocidex/velociraptor/blob/master/vql/server/search.go

Contributor

scudette commented Jun 23, 2021

No it is more referring to the local hashes maintained by Generic.Forensic.LocalHashes.Init and Generic.Forensic.LocalHashes.Glob

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment