Digital forensics is a critical field in information security and especially incident response. Providing intelligence about known set of files is crucial to avoid wasting efforts while conducting digital investigations. hashlookup format provides a common output format for diverse known databases of file hashes. Those databases are, for example, the NIST National Software Reference Library (NSRL) or Known File Filter (KFF) lists used in digital forensics software.

• For more information, check out the hashlookup service page at CIRCL.lu.

• hashlookup format - Internet-Draft 02

You can make pull request to the Markdown document. We are looking for comments from hashlookup users or digital forensic experts in order to improve the format.