Hello, i just want to thank you very much for this nice step by step. I am just beginning my cybersecuity degree with very little computer experience, so this was a little confusing! So thank you!
Hi, thank you for a good explanation of finding the sneaky executable. Would you know how I use md5deep to get a hash of an external hard drive? I need to hash a hard drive before I clone it. FTK will give me a hash after cloning, but I need some other tool to hash it before cloning.
I'd like to compare a folder on 2 separate and unconnected Windows computers. They both have the same folder/subfolders/files, but something is different between them, and I'd like to find what! Is there a tool that I can run separately on each computer, that generates hashes for all files, and then compare which files had a different checksum? I found this, but it seems to only work for linux/cygwin? hashdeep64 -c md5 -r -l -e -vvv * | tee ../ComputerAChecksum.txt hashdeep64 -c md5 -r -l -k ../ComputerAChecksum.txt -a -e -vvv * | tee ../DifferenceResults.txt cat ../DifferenceResults.txt | grep -E ": No match|: Known file not used" Github has a CrcCheckCopy but unfortunately, generates a single CRC for the entire folder, rather than report which files are different.
I am also looking for something similart. But, I want to compare entire laptops to each other...old one against the new to make sure the old data has been faithfully copied over to the new one.
Thank you. I want to compare two separate computers used by one person and make sure that the data from the old one (which the user has stopped using 3 months ago) and the current laptop that is being used is the same. How do I do that? {Apart from setting them side by side and using file explorer to go through each folder :) }
If the contents of the file changed, this tool will not do what you want. You could try something like Duplicate File Finder or other file compare software (many are free) - it allows multiple inputs and then compares - it will show exact matches and likely matches - which would help you track down the possible changes on computer 1 versus computer 2.
This tool is not a good option to had your C drive for two reasons. One you're using the drive while you're running it. Two it's more complicated than using something like FTK imager. - The reasons you may want to do it anyways - this is quick and lightweight. You could netcat from another machine, but still not ideal.
Johnathan Yerby okay, but I’m experimenting in a safe virtual lab environment using two VMs. So again, what is the best way to use it against all C drive files?
Dr. Yerby, I am in the middle of my capstone for my Masters in Cyber security. I could sure use your help with my hashing lab. Do you help students out?
Hello, i just want to thank you very much for this nice step by step. I am just beginning my cybersecuity degree with very little computer experience, so this was a little confusing! So thank you!
Hi, thank you for a good explanation of finding the sneaky executable. Would you know how I use md5deep to get a hash of an external hard drive? I need to hash a hard drive before I clone it. FTK will give me a hash after cloning, but I need some other tool to hash it before cloning.
I'd like to compare a folder on 2 separate and unconnected Windows computers. They both have the same folder/subfolders/files, but something is different between them, and I'd like to find what!
Is there a tool that I can run separately on each computer, that generates hashes for all files, and then compare which files had a different checksum?
I found this, but it seems to only work for linux/cygwin?
hashdeep64 -c md5 -r -l -e -vvv * | tee ../ComputerAChecksum.txt
hashdeep64 -c md5 -r -l -k ../ComputerAChecksum.txt -a -e -vvv * | tee ../DifferenceResults.txt
cat ../DifferenceResults.txt | grep -E ": No match|: Known file not used"
Github has a CrcCheckCopy but unfortunately, generates a single CRC for the entire folder, rather than report which files are different.
I am also looking for something similart. But, I want to compare entire laptops to each other...old one against the new to make sure the old data has been faithfully copied over to the new one.
Thank you. I want to compare two separate computers used by one person and make sure that the data from the old one (which the user has stopped using 3 months ago) and the current laptop that is being used is the same. How do I do that? {Apart from setting them side by side and using file explorer to go through each folder :) }
If the contents of the file changed, this tool will not do what you want. You could try something like Duplicate File Finder or other file compare software (many are free) - it allows multiple inputs and then compares - it will show exact matches and likely matches - which would help you track down the possible changes on computer 1 versus computer 2.
@@DrYerby Thank you for your answer. You are very kind.
How do you use the md5deep hash tool against all files contained within the C: drive?
This tool is not a good option to had your C drive for two reasons. One you're using the drive while you're running it. Two it's more complicated than using something like FTK imager. - The reasons you may want to do it anyways - this is quick and lightweight. You could netcat from another machine, but still not ideal.
Johnathan Yerby okay, but I’m experimenting in a safe virtual lab environment using two VMs. So again, what is the best way to use it against all C drive files?
Dr. Yerby, I am in the middle of my capstone for my Masters in Cyber security. I could sure use your help with my hashing lab. Do you help students out?
I help my students always. What did you need help with?