Verify and Match Files
OSForensics™ makes use of number of advanced hashing algorithms to create a unique, digital fingerprint that can be used to identify a file.
Confirm that files have not been corrupted or tampered with by comparing hash values, or identify whether an unknown file belongs to a known set of files.
Create and Verify Hash Values
Create a unique, digital identifier for a file or disk volume by calculating its hash value using the Verify/Create Hash module in OSForensics. Choose from a number of cryptographic algorithms to create a hash, such as SHA-1, MD5 and SHA-256. Hash values uniquely identify the contents of a file and can be used to discover other files with the same content, regardless of differing file name or file extension.
For disk volumes, a single hash value is created which describes the content of files, directory structures as well as unallocated space on the specified volume. Verify that a disk volume has not been corrupted or tampered with by comparing the new hash value with the original and expect hash value. such as, verifying exact disk duplicates created by the free OSForensics disk cloning tool, OSFClone.