Find SHA1 value of all the files in PC

Is there any possibility to create a SHA1 filter against all the files in the PC (in all directories also include subfolders).

This is pretty massive

(name of it, sha1 of it) of find files "*" of (descendant folders of folder "C:\")

@rizwansoc

Doing this with the BigFix agent directly, as @MMosley was alluding too, is very expensive and should be wrapped in an action script and run once, on a controlled basis. Dropping this into a property will result in big slow cost to your infrastructure, with upstream relay, server and DB bloat.

This sounds like you are trying to scan for a specific SHA1 (probably from a security point of view). BigFix Inventory has some features that can help with that.

2 Likes

@brolly33 thank u so much for your reply i will try it in action script hope so it will work… yes you are right i am trying to scan a SHA1 value in whole system.

Not sure if this will help you or not, but on the BigFix.me site there is information about using BigFix forensically. You might get some ideas with the relevance used there

https://bigfix.me/projects/details/23

1 Like

@brolly33 i have run the query but the query terminate when calculating the SHA1 of a file which are used by another process and gives an error

@rizwansoc
If you have BigFix Inventory, I would recommend using this feature:
https://help.hcltechsw.com/bigfix/9.5/inventory/Inventory/security/t_checksums_main.html

If you do not, your action script will have to deal with locked files and symlinks and a host of other edge case that BFI already takes care of.

1 Like