Glossary: Vulnerability, Asset and Change Management

Hash (SHA-256)

Also written: hash, SHA-256, checksum, SHA256SUMS

A fingerprint of a file. If your download's SHA-256 doesn't match the vendor's published one, the file was changed. A match only proves the file wasn't altered after publication, not that it's harmless.