From cc1a029fc6e87e1233e703cc08bd9852c9c14225 Mon Sep 17 00:00:00 2001 From: Eric Conrad Date: Thu, 7 Sep 2017 16:14:04 -0400 Subject: [PATCH] Delete readme.md --- DeepBlueWhite/readme.md | 22 ---------------------- 1 file changed, 22 deletions(-) delete mode 100644 DeepBlueWhite/readme.md diff --git a/DeepBlueWhite/readme.md b/DeepBlueWhite/readme.md deleted file mode 100644 index 87446e6..0000000 --- a/DeepBlueWhite/readme.md +++ /dev/null @@ -1,22 +0,0 @@ -### DeepBlueCLI Whitelist - -Placeholder, more to come... - -Install hashdeep: https://github.com/jessek/hashdeep/releases - -Generate your own whitelist on Windows: -``` -hashdeep.exe -r / -c md5,sha1,sha56 > raw-hashes.csv -``` - -Note that hashdeep, etc., has a dumb recursive design (from the manpage): - -> Enables recursive mode. All subdirectories are traversed. Please note that recursive mode cannot be used to examine all files of a given file extension. For example, calling hashdeep -r *.txt will examine all files in directories that end in .txt. - -Move file to Unix/Linux, remove Windows carriage returns, grab EXEs and DLLs, make CSV. - -CSV format will be: md5,sha1,sha256,full path: - -``` -cat raw-hashes.csv | tr -d '\r' | egrep "\.dll$|\.exe$" | cut -d, -f2- > win10-x64.csv -```