DonationCoder.com Software > Finished Programs

DONE: Tool that lists digitally signed files from a folder/disk

(1/18) > >>

neverlight:
At the moment, I can not find such a tool.

This kind of tool could be quite handy since malware analysts/researchers look into digitally signed files for whitelisting/blacklisting purposes.
Possible (important) features (to be considered):
- display digitally signed files from a specific folder as a list;
- ability to view the specific folder using a right-click menu (or something similar) on the digitally signed file;
- ability to filter files using digital signature details such as "Issued by", "Issued to", "Valid from" - "to", etc;


Kind Regards,
Marius
 

mouser:
That's really not a bad idea at all -- especially if it showed a grid with the signing details.

4wd:
Maybe skwire can add another column to SFV Ninja ?

Turn it into CFV Ninja, (Complicated File Verification).

neverlight:
I didn't expect such positive replies.


Please note,that it's (very) important to know which files have a valid digital signature in terms of #date. In other words, to less or equal to current date. That could be a method.
Now, extending the idea of complex verification, It could also use an 'offline database', perhaps a text file (list) that contains default/custom trusted vendors. The vendors that are listed in the respective text file will show in a color, let's say green while the others that are not in the list will be marked red. Of course, colors could be customizable/user-choice -- whatever seems appropriate to DonationCoder.

Thanks again for the great feedback.

Kind regards,
Marius

Curt:
is this the same as sigverif?

Verify Unsigned Device Drivers

    Click Start, click Run, type sigverif, and then click OK.
    Click Advanced.
    Click Look for other files that are not digitally signed.

    In the Look in this folder box, type x:\Windows\system32\drivers, where x is the letter of the drive where Windows is installed.
    On the Logging tab, make sure the Save the file signature verification results to a log file check box is selected, and then click OK.
    Click Start.

    NOTE: The log file is named Sigverif.txt, and it is saved in the Windows folder. Third-party drivers that are unsigned are displayed as "Not signed." Use the drivers in this list as your troubleshooting starting point.

http://support.microsoft.com/kb/308514-support.microsoft.com/kb/308514
--- End quote ---

The article was about XP, but I can confirm that I have sigverif on Win 7 as well.

Navigation

[0] Message Index

[#] Next page