Description
Known data blocks can be found inside disk images or other media by comparing against previously identified hash databases.
It is useful for digital forensics, triage, deduplication, and investigations where repeated or known content must be recognized quickly. Forensic work may involve sensitive personal data, so preserve evidence handling, permissions, and audit records.