hashdeep

Recursively hash & audit file sets.

KaliParrotLinuxpassive

pkg: hashdeep

hashdeep computes and audits hashes across directory trees to verify integrity and detect changes.

Syntax

hashdeep -r {dir}

Example

hashdeep -r -c sha256 /evidence

Recursively SHA-256 hashes every file for an integrity baseline.

Advantages
  • Recursive + multiple algorithms
  • Audit mode
Disadvantages
  • Hashing large sets is slow
  • CLI
Tags
#integrity#dfir

Official docs: hashdeep ↗

Related commands

Frequently asked questions

What is hashdeep used for?
hashdeep computes and audits hashes across directory trees to verify integrity and detect changes.
What is an example hashdeep command?
A common example is: hashdeep -r -c sha256 /evidence — Recursively SHA-256 hashes every file for an integrity baseline.
Is hashdeep part of Kali Linux?
Yes. hashdeep ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install hashdeep.
What category of security tool is hashdeep?
hashdeep is a Forensics tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →