CENSUS(1)

NAME
census - CertiSigma Census — Cryptographic file...

SYNOPSIS
census [OPTIONS] COMMAND [ARGS]...

DESCRIPTION
CertiSigma Census — Cryptographic file inventory & breach detection.

OPTIONS

--version
    Show the version and exit.

-v, --verbose
    Enable debug logging.

-q, --quiet
    Suppress informational output (errors and --json still shown).

--log-format [text|json]
    Log output format (default: text). Also: CENSUS_LOG_FORMAT env.

--no-color
    Disable colored output (also respects NO_COLOR env, see no-color.org).

--encryption-key TEXT
    AES-256 key (64 hex) for manifest encryption at rest. Also: CENSUS_ENCRYPTION_KEY env.

COMMANDS

scan
  Scan a directory, compute hashes, and...
  See census-scan(1) for full documentation on the scan command.

compare
  Compare suspect files against the...
  See census-compare(1) for full documentation on the compare command.

status
  Show manifest status (total files,...
  See census-status(1) for full documentation on the status command.

export
  Export a manifest as CSV, JSON, or...
  See census-export(1) for full documentation on the export command.

verify
  Verify a hash (or file) against the...
  See census-verify(1) for full documentation on the verify command.

integrity
  Check file integrity against a manifest...
  See census-integrity(1) for full documentation on the integrity command.

update
  Update manifest baseline to match current...
  See census-update(1) for full documentation on the update command.

verify-manifest
  Verify all manifest hashes against the...
  See census-verify-manifest(1) for full documentation on the verify-manifest command.

report
  Generate a forensic report from a manifest.
  See census-report(1) for full documentation on the report command.

verify-report
  Verify a previously attested report.
  See census-verify-report(1) for full documentation on the verify-report command.

diff
  Compare two manifests and show differences.
  See census-diff(1) for full documentation on the diff command.

hash
  Compute SHA-256 hash of a file, directory,...
  See census-hash(1) for full documentation on the hash command.

track
  Track attestation status and T0/T1/T2...
  See census-track(1) for full documentation on the track command.

config
  Manage Census configuration.
  See census-config(1) for full documentation on the config command.

merge
  Merge multiple manifests into one.
  See census-merge(1) for full documentation on the merge command.

doctor
  Run diagnostic checks on Census...
  See census-doctor(1) for full documentation on the doctor command.

completion
  Generate shell completion script.
  See census-completion(1) for full documentation on the completion command.

audit-log
  Manage the tamper-evident audit log.
  See census-audit-log(1) for full documentation on the audit-log command.

snapshot
  Manage named manifest snapshots for...
  See census-snapshot(1) for full documentation on the snapshot command.

annotate
  Annotate an attestation with forensic...
  See census-annotate(1) for full documentation on the annotate command.

share
  Forensic share tokens — create, list,...
  See census-share(1) for full documentation on the share command.

tag
  Structured tagging — classify attestations...
  See census-tag(1) for full documentation on the tag command.

key-rotate
  Rotate encryption key for an attestation's...
  See census-key-rotate(1) for full documentation on the key-rotate command.

derived-list
  Census derived lists — opaque third-party...
  See census-derived-list(1) for full documentation on the derived-list command.

metadata
  Read attestation metadata.
  See census-metadata(1) for full documentation on the metadata command.

key-gen
  Generate a random AES-256 encryption key.
  See census-key-gen(1) for full documentation on the key-gen command.

bulk-scan
  Bulk leak detection: scan suspect files...
  See census-bulk-scan(1) for full documentation on the bulk-scan command.

stats
  Show organization-level inventory statistics.
  See census-stats(1) for full documentation on the stats command.

seal
  Create an HMAC-SHA256 seal for a manifest.
  See census-seal(1) for full documentation on the seal command.

verify-seal
  Verify the HMAC-SHA256 seal of a manifest.
  See census-verify-seal(1) for full documentation on the verify-seal command.

compliance-report
  Generate a compliance report (NIS2, DORA,...
  See census-compliance-report(1) for full documentation on the compliance-report command.

watch
  Watch a directory for changes and attest...
  See census-watch(1) for full documentation on the watch command.

archive
  Create a forensic evidence archive from a...
  See census-archive(1) for full documentation on the archive command.

verify-archive
  Verify the integrity of a Census forensic...
  See census-verify-archive(1) for full documentation on the verify-archive command.

ai-policy
  AI governance: classify assets for ML/AI...
  See census-ai-policy(1) for full documentation on the ai-policy command.

webhook
  Manage CertiSigma webhooks for T1/T2...
  See census-webhook(1) for full documentation on the webhook command.