check file HASH with SHA256
Shows an example of how to verify a log file using the SHA256 hash function to confirm that the file is correct and has not been modified
Hashing with SHA256 (Secure Hash Algorithm) is a method of converting an input of any size into a 256-bit output using the SHA256 algorithm. It is used to verify that the input data has not been modified. Hashing is used to demonstrate data integrity: changing just a single character of the input will completely change the resulting HASH value. Administrators can easily verify data integrity by using the SHA256 algorithm via various websites, or by installing a program that performs this function on their computer. Below is an example of a website that provides HASH generation with SHA256:
For example, when the input is Hello World, the SHA256 output is 64ec88ca00b268e5ba1a35678a1b5316d212f4f366b2477232534a8aeca37f3c
When the input is changed to Hello Warld (changing World to Warld), the output becomes afab019330eb8ab403ba8400e52eb9008fdf7652ce9397ddc4839b4d5be4c1ac, which is completely different even though only one character was changed.
To verify data integrity in SEARA, you can use the same method with a log file as the input (you can use the .gz file directly without extracting it). Upload the file to the website and it will calculate the SHA256 HASH of that file. You can then compare the output with the value stored in the system's database to verify whether they match. For example:
firewall.log-2023-02-26H23.gz is an Internet Traffic Log file for 26 February 2023 from 22:00-23:00. When checked 
in the system, the value is 4d042baa1ad70c656546ef25ccd9827721cbfdbfa0e221e3e583af621219fea1
Verify the value by downloading the file and checking it on the website:
The result is 4d042baa1ad70c656546ef25ccd9827721cbfdbfa0e221e3e583af621219fea1 as shown.
This matches the value stored in the database, proving that the file contains correct data and has not been modified.
Last updated