Verify Source
Robert Mayer
Is there a way to verify the source of the .exe files that are being used in the package library with PDQ Deploy? I'm a newbie to this and just starting to figure this out, but would like to be able to verify where these install files come from. Thanks!
0
Comments
Unfortunately it's going to be a manual process for you. If you have questions about specific packages I can show you how I verify them. In general we compare the SHA256/SHA1/MD5 hash of the files to what's provided on the publisher's website. For example, Mozilla posts a huge file of SHA256 hashes for each version like this: https://ftp.mozilla.org/pub/firefox/releases/64.0/SHA256SUMS
Thanks!