What is hashing and how can we use it in forensics?
Cryptographic hashes are a family of mathematical functions that reduce an input down to a small, fixed size output. They can be used to fingerprint known good or bad files and then compare those fingerprints against unknown files. Any new files that match the known good files can be eliminated from further analysis. Any files that match the known bad files should be noted and investigated.
