Excluding ‘known good’ files
Using the HashKeeper database, files known to be in standard distributions can be eliminated from file-system searches
- Select “Search” “Analyze /mnt”
- Press “Go”
- Analysis results:
- Changes from previous analyses will be identified
- This indicates corruption on the image
- Known distribution files are identified and marked
- Remaining files are identified for further analysis