NAME
sic.pl - drive and folder integrity checking tool
SYNOPSIS
sic.pl [ -fqdecmt ]
DESCRIPTION
sic.pl is a drive(s) and folder integrity checking tool.
It creates db's of md5 , sha1 , sha256 and sha512 hashes and then
checks for modified or new files.
If modified or new files are found, an email report is sent.
OPTIONS
Options that make sense together can generally be combined.
sic.pl tries to catch and warn the user about unsupported option combinations.
If you are impatient, you can skip to the examples section at the end,
which demonstrates common usage. You can also run sic.pl -h for a quick
reference page listing all the options.
-m dbname
create (make) a hash db.
-c dbname
check a drive/folder's integrity.
sic.pl will re-create a hash db and compare it with the initial one.
It will report modified and new files.
-d folder | drive
start drive or folder. If not specified :
windows : search drives A-Z
linux : mandatory parameter
if none of the following (fqe) option is specified, the files with the
following extensions will be hashed:
.286 .386 .ade .adp .bas .bat .chm .class .cmd .com .cpl .crt .dll .doc .dot
.drv .exe .fot .hlp .hta .htm .html .htt .inf .ins .isp .job .js .jse .lnk
.mdb .mde .mdt .mdz .mht .msc .msi .msp .mst .ocx .ovl .pcd .pif .pot .ppa
.qtx .reg .rom .scf .scr .sct .shb .shs .sys .url .vb .vbe .vbs .vbx .vxd
.wiz .wll .wpt .wpm .wsc .wsf .wsh .xla .xll .xls .xlt
-f(ull)
hash all the files. (Recommended on linux)
-q(uick)
hash files with extension (.bat .cmd .com .exe .ocx .pif .sys .vbs .wsh)
You can of course modify this list
-e(xtension)
hash files with a specific extension
-t md5 | sha | sha256 | sha 512
hash type. default (without -t) is sha.
EXAMPLES
sic.pl -m hashdb -d c:\winnt
make md5 and sha hashes of "sensible" files (see list above) in
c:\winnt and subfolders.
sic.pl -c hashdb -q -t sha512
check integrity of "dangerous" files (see -q above) in all drive
using sha
BUGS
Bugs? What bugs? Send me any that you find. Patches are nice too :)
AUTHOR
simon spencer <spencer@netsecurityconsulting.ch>
DISTRIBUTION
The newest version of sic.pl can be obtained from
http://www.netsecurityconsulting.ch