readme.txt
May 6, 2011 ยท View on GitHub
-
Quickly find encrypted TrueCrypt files and other files made-up of random data that have the four (4) TCHunt attributes.
-
The four (4) TCHunt attributes:
- The suspect file size modulo 512 must equal zero.
- The suspect file size is at least 19 KB in size (although in practice this is set to 5 MB).
- The suspect file contents pass a chi-square distribution test.
- The suspect file must not contain a common file header.
-
As of version 1.5a, TCHunt is distributed solely under the GPL software license.
-
To compile TCHunt, you need the boost and FLTK libraries. I link statically and you should consider doing that as well. Read the build scripts to see how I compile TCHunt.
-
Visit the TCHunt homepage for more details:
END