Definition

Employing file hash comparisons to detect known malware.

How it works

This technique requires a list of hashes to compare a file against.

Considerations

Performance on large files or very large numbers of files.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

References

Reference - Munin