tabledevil
09ab281881
Replace the self-built 2021 NSRL RDS md5 bloom with CIRCL's offline hashlookup-full.bloom (SHA-1, NSRL + more), downloaded at build. Old single-hash CLI preserved (now SHA-1); 'analyse -d <dir>' runs hashlookup-forensic-analyser against the bundled bloom. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
14 lines
544 B
Bash
Executable File
14 lines
544 B
Bash
Executable File
#!/bin/bash
|
|
# nsrl entrypoint — dispatches between single-hash lookup and directory mode.
|
|
# <sha1> ... | -s | -h -> search.py (old NSRL CLI, SHA-1)
|
|
# analyse [args] -> hashlookup-forensic-analyser with the
|
|
# bundled bloom (e.g. analyse -d /data)
|
|
set -euo pipefail
|
|
|
|
if [ "${1:-}" = "analyse" ] || [ "${1:-}" = "analyze" ]; then
|
|
shift
|
|
exec python3 /opt/hfa/bin/hashlookup-analyser.py \
|
|
--bloomfilters /nsrl/hashlookup-full.bloom "$@"
|
|
fi
|
|
exec python3 /nsrl/search.py "$@"
|