Acorn application guide
Hash & Keyword Manager
A reference match is most useful when the algorithm, list and classification remain clear. The demonstrated hash workflow identifies a match to supplied reference material. The examiner must still decide what that identity means for the question being investigated.
Demonstrated on public training data
Does this file match a supplied reference, and what does that reference actually classify?
Start with
- A file hash and a registered reference list in the demonstrated SHA-256 lookup.
What you can take away
- A reference-match result and its registered classification.
View full screenOpen the screenshot and choose “View actual size” to read the records at their original resolution.
A practical starting point
How the workflow fits together.
Identify the reference list, its provenance and the hash algorithm before comparing a value.
Review the selected match and keep the reference classification distinct from an independent assessment of the file.
For a material result, recompute the relevant hash through a suitable separate method and record the comparison. Explain the reference used without turning its label into a safety or ownership verdict.
Evaluate the workflow
Questions worth bringing to a demonstration.
- Which algorithm and reference-list version produced the match being demonstrated?
- Can I recompute the selected value independently and identify the same reference entry?
- What does the reference classification establish, and which conclusions would require further examination?
Useful next steps
Start with your requirements
Bring a sample question.
Ask us to demonstrate this workflow with suitable public or constructed material. Do not send confidential evidence in an initial enquiry.
Planned for Q1 2027
Be first to hear. Save 10% at launch.
Request Acorn launch news and details of the planned 10% offer. No deposit or purchase commitment.
Launch-update requests go to the SQFR team for review. Final offer terms and product availability are still to be confirmed.
About the screenshots and illustrations
Application screens are selected from the September 2026 Acorn screenshot pack. Captions distinguish native setup views, constructed training records and public-corpus results. They are not private client cases, and a displayed control does not establish that every operation was completed.
Relevant public sources include DeepBlueCLI training event logs and Plaso test data. Check the relevant source terms before redistributing an underlying dataset.
Workspace scenes and sector mascot variants are generated illustrations. They do not show actual police, judicial, military or university deployments or endorsements. The original Squirrel Forensics identity is retained.