Target Platforms: Windows
Requirements: .NET 2.0 installed on the target host. The “MRC File Hasher.exe” must be located in the same directory as the “MRC File Hasher.sif” file. If you are running SecurityExpressions 4.0 and your policy files are loaded into the database, you may hard-code the location of “MRC File Hasher.exe”.
Description: The MRC File Hasher is designed to allow the SecurityExpressions Administrator to target a specified directory on a Windows computer and establish a baseline of the files that it contains. This baseline consists of a file hash for every file in the specified directory.
The first time the policy file is executed, a baseline of the target system is automatically created. Every subsequent execution will result in a comparison of the file against the previously generated baseline. Any files that have changed since the baseline was generated will be flagged as “Not Ok”.
