ssdeep
« Back to VersTracker
Description:
Recursive piecewise hashing tool
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security forensics hashing deduplication cli
Install: brew install ssdeep
About:
Ssdeep computes and compares context-triggered piecewise hashing (CTPH) signatures, also known as fuzzy hashes. This technique allows for the detection of similar data within files, even when they differ by small modifications. It is particularly effective for identifying malware variants, digital artifacts, and data deduplication.
Key Features:
  • Computes fuzzy hashes using CTPH
  • Compares files to find matches based on similarity scores
  • Recursive directory scanning capabilities
  • Fast processing of large datasets
Use Cases:
  • Digital forensics and incident response (DFIR) for identifying malware variants
  • Plagiarism detection and data integrity verification
  • Finding duplicate or near-duplicate files in large storage systems
Alternatives:
  • TLSH – Trend Micro's fuzzy hashing algorithm, often cited as having better performance and stability for large datasets compared to ssdeep.
  • sdhash – Focuses specifically on forensic data carving and finding similar fragments of data.
Version History
Detected Version Rev Change Commit
Sep 11, 2025 6:36am 0 VERSION_BUMP 18ce7695