hashdeep

Recursively hash & audit file sets.

KaliParrotLinuxpassive

pkg: hashdeep

hashdeep computes and audits hashes across directory trees to verify integrity and detect changes.

Syntax

hashdeep -r {dir}

Example

hashdeep -r -c sha256 /evidence

Recursively SHA-256 hashes every file for an integrity baseline.

Advantages
  • Recursive + multiple algorithms
  • Audit mode
Disadvantages
  • Hashing large sets is slow
  • CLI
Tags
#integrity#dfir

Official docs: hashdeep

Related commands

Frequently asked questions

What is hashdeep used for?
hashdeep computes and audits hashes across directory trees to verify integrity and detect changes.
What is an example hashdeep command?
A common example is: hashdeep -r -c sha256 /evidence — Recursively SHA-256 hashes every file for an integrity baseline.
Is hashdeep part of Kali Linux?
Yes. hashdeep ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install hashdeep.
What category of security tool is hashdeep?
hashdeep is a Forensics tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →