marcusone Posted January 15, 2012 Share Posted January 15, 2012 I'm having trouble finding on the boards a good "howto" use md5deep on a regular basis (i.e. monthly) to store and check file md5sums. All I seem to be able to find is that md5deep is a good tool to do this and I have downloaded and install v4.0 from weebtech (thanks). Can someone please point me in the right direction? Thanks! Quote Link to comment
dgaschk Posted January 15, 2012 Share Posted January 15, 2012 Create a script the runs md5deep and then compares the results to the previous run and sends an e-mail if there's a difference. Put the script file in cron daily. Quote Link to comment
abs0lut.zer0 Posted January 15, 2012 Share Posted January 15, 2012 Create a script the runs md5deep and then compares the results to the previous run and sends an e-mail if there's a difference. Put the script file in cron daily. and for those of us that aren't any good at scripting ? Quote Link to comment
dgaschk Posted January 15, 2012 Share Posted January 15, 2012 I can supply a script after I return home on the 23rd. Someone else may get to it faster. Quote Link to comment
marcusone Posted January 15, 2012 Author Share Posted January 15, 2012 Thanks! Sent from my SGH-I727R using Tapatalk Quote Link to comment
HAVOC Posted February 2, 2012 Share Posted February 2, 2012 I second that request. Quote Link to comment
dgaschk Posted February 14, 2012 Share Posted February 14, 2012 I finally looked into this. It's not practical to run daily unless you only want to check a small number of files. It takes 14 hours to run on a 2TB drive. Monthly checks may be practical. Hashdeep will create a file of hashes for a specified directory. Hashdeep has an audit mode that will compare the hashes to the the corresponding files and report any changes to the files. Instructions are here: http://md5deep.sourceforge.net/start-hashdeep.html In order to run a cron job with email you'll need a script like this: #!/bin/bash hashdeep -r -a -k known.txt myfiles | mail -s hash-audit root Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.