verify_image_integrity
Hash an evidence image with SHA256 or MD5 to confirm integrity for chain-of-custody. Use this as the first step in forensic examination.
Instructions
Hash an evidence image (sha256/md5) for chain-of-custody. Run this first.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source | Yes | ||
| image_path | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | Yes | ||
| source | Yes | ||
| preview | Yes | First rows only; query the rest via artifact_query | |
| row_count | Yes | ||
| artifact_id | Yes | Cite this id in findings (artifact_refs) | |
| payload_sha256 | Yes |