Skip to content
Pre-launch / First modules December 14, 2026.Lessons and community run on Skoolhttps://www.skool.com/dfir
DFIR
SIFT / Verify

Verifying what you install

DFIR.com publishes no image at this time and therefore no image hash.

  1. 1. Get the Cast installer

    Get the Linux package for your architecture from the official Cast GitHub release page, not a third-party mirror.

    Cast: latest GitHub release

  2. 2. Verify the installer

    Checked 2026-11-09: Cast v1.0.42 publishes checksums.txt, checksums.txt.sigstore, cosign.pub and pgp.pub. Compare the SHA-256 of the exact downloaded package with its filename's entry in checksums.txt. Verify the checksum signature using the upstream signature material and a trusted key or identity. A matching checksum alone does not authenticate the publisher. The checked README and release notes do not publish an exact signature-verification command, so none is invented here. If you cannot establish trust, stop before installation.

    Checked release and verification assets · Checked README revision

  3. 3. Install from the guide

    Once verification succeeds, follow the Ubuntu preparation, Cast installation and SIFT installation steps in the install guide.

    Install SIFT

  4. 4. Confirm the result

    Review Cast's completion output for failures. The full post-install version checks requested for Prompt 7 are pending, and clean-VM verification has not been performed. Do not assume the installation is validated for casework.

    Post-install validation status

  5. 5. Stop if a check fails

    Stop, do not use the install, and report the failed check to Contact Rob through robtlee.com. Include the upstream release, package filename and error, but no evidence or credentials. This is the published contact address; a dedicated security address has not been supplied.

    Report a failed check

Last reviewed