How to Secure Your Software Supply Chain and Speed-Up DFIR with Hashlookup
summary
Indexes hashes from Linux, Windows and many package sources into an open-source backend and public API, currently holding 25 billion keys and growing about 1 billion every two weeks. Provides a MISP module, a cross-platform GUI and a Python forensic analyzer that queries online or via Bloom filters weekly exports for fast offline lookups. Returns file metadata, parent references and a simple trust score so analysts can triage large image sets quickly and reliably.
AI-written summary · about
chapters (14)
- 0:00Software supply chain security
- 1:40Supply chain compromise attacks
- 3:04Verifying software integrity
- 8:20Indexing software releases
- 10:05Hashlookup project
- 11:51How Hashlookup works
- 14:21Hashlookup API demo
- 16:04MISP threat intelligence
- 17:27Bloom filters for lookups
- 19:58Hashlookup forensic tools
- 22:06Trust and repackaging risks
- 23:51Legal frameworks and SBOM
- 26:40Hashlookup future plans
- 30:34Q&A on Bloom filters
related talks
30mEnhancing CTI Processes with Code Search Technology
26mEffective Software Supply Chain Monitoring
25mTrusting Your Open-Source Software Supplier
28mBuild your first Cyber Forensic Application
38mSecuring the chains: Building defensive layers for software supply chains
31mFiltering the Noise: Crafting an Actionable Threat Feed from Community-Shared Intelligence
36m Hashing the $#!+ out of firmware
34mRising Threat: Securing Your Open-Source Pipeline