In this video Joshua James uses SSDEEP to create fuzzy hashes of text and image files, and compare the similarity between files in a directory. SSDEEP is used to create hashes that are not exact matches, but instead compare similarity between two files at the binary level. It can be used to look for modified and original documents, or compare known files to a current system based on similarity (minor change detection).

Load More Related Articles
Load More In How To

Leave a Reply

Your email address will not be published. Required fields are marked *