thomaslaurenson
released this
09 Feb 19:10
·
21 commits
to master
since this release
Updated release of the LiveDiff tool (version 1.4.0).
The following downloads are provided in this release: LiveDiff-1.4.0.zip
- MD5 hash value: 3130d733903ba7562057e9c4b2c84885
The distributed zip archive (LiveDiff-1.4.0.zip) contains:
- Compiled Microsoft Windows binary executable (LiveDiff-1.4.0.exe)
- Static blacklist example (static-blacklist.txt)
- LiveDiff license file (License.txt)
- Project documentation (README.md)
- List of files and associated MD5 hashes (MD5.txt)
Changelog:
- Moved block based hashing from experimental status to tested
- Added support to specify block size when performing block based hashing with the '-b' command line option. See the following examples for usage:
LiveDiff-1.4.0.exe -d -b 512
LiveDiff-1.4.0.exe -d -f static_blacklist.txt -b 4096
- Added entropy calculation for block based hashing. Each block is subjected to entropy calculation and is reported in the DFXML byte_run element. See the following example:
<byte_run entropy="5.033007" file_offset="11264" len="512">
<hashdigest type="MD5">94028b9d6d872a03c633ddd1630cc028</hashdigest>
</byte_run>