org.sleuthkit.datamodel.HashUtility Class Reference

Classes
class	HashResult
enum	HashType

Static Public Member Functions
static List< HashResult >	calculateHashes (Content content, Collection< HashType > hashTypes) throws TskCoreException
static String	calculateMd5 (AbstractFile file) throws IOException
static String	calculateMd5Hash (Content content) throws IOException
static boolean	isNoDataMd5 (String md5)
static boolean	isValidMd5Hash (String md5Hash)
static boolean	isValidSha1Hash (String sha1Hash)
static boolean	isValidSha256Hash (String sha256Hash)

Detailed Description

Utility to calculate a hash for FsContent and store in TSK database

Definition at line 36 of file HashUtility.java.

Member Function Documentation

calculateHashes()

List< HashResult > org.sleuthkit.datamodel.HashUtility.calculateHashes ( Content content, Collection< HashType > hashTypes ) throws TskCoreException

static

Calculate hashes of the content object.

Parameters

content	The content object to hash
hashTypes	The types of hash to compute

Returns

A list of the hash results

Exceptions

TskCoreException

Definition at line 50 of file HashUtility.java.

Referenced by calculateMd5Hash().

calculateMd5()

String org.sleuthkit.datamodel.HashUtility.calculateMd5 ( AbstractFile file ) throws IOException

static

Calculate the MD5 hash for the given FsContent and store it in the database

Parameters

file	file object whose md5 hash we want to calculate

Returns

md5 of the given FsContent object

Exceptions

java.io.IOException

Deprecated

Use calculateHashes() instead

Definition at line 201 of file HashUtility.java.

References calculateMd5Hash().

calculateMd5Hash()

String org.sleuthkit.datamodel.HashUtility.calculateMd5Hash ( Content content ) throws IOException

static

Calculate the MD5 hash for the given FsContent

Parameters

content

content object whose md5 hash we want to calculate

Returns

md5 of the given FsContent object

Exceptions

java.io.IOException

Deprecated

Use calculateHashes() instead

Definition at line 224 of file HashUtility.java.

References calculateHashes(), and org.sleuthkit.datamodel.HashUtility.HashType.MD5.

Referenced by calculateMd5().

isNoDataMd5()

boolean org.sleuthkit.datamodel.HashUtility.isNoDataMd5 ( String md5 )

static

Determine if the passed in Hash value is that for no data (i.e. an empty file). Looking these values up or correlating on them causes lots of false positives.

Parameters

md5

Returns

True if it is the empty hash value

Definition at line 144 of file HashUtility.java.

isValidMd5Hash()

boolean org.sleuthkit.datamodel.HashUtility.isValidMd5Hash ( String md5Hash )

static

Determines whether a string representation of an MD5 hash is valid.

Parameters

md5Hash

The hash.

Returns

True or false.

Definition at line 109 of file HashUtility.java.

isValidSha1Hash()

boolean org.sleuthkit.datamodel.HashUtility.isValidSha1Hash ( String sha1Hash )

static

Determines whether a string representation of a SHA-1 hash is valid.

Parameters

sha1Hash

The hash.

Returns

True or false.

Definition at line 120 of file HashUtility.java.

isValidSha256Hash()

boolean org.sleuthkit.datamodel.HashUtility.isValidSha256Hash ( String sha256Hash )

static

Determines whether a string representation of a SHA-256 hash is valid.

Parameters

sha256Hash

The hash.

Returns

True or false.

Definition at line 131 of file HashUtility.java.

---

The documentation for this class was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/HashUtility.java