Abstract: A method, article of manufacture, and apparatus for efficiently processing information are disclosed. In some embodiments, a first signature index is received. The first signature index is compared to a second signature index. A negative signature match is based on the comparison. A file is flagged based on the negative match.

Abstract: A method, article of manufacture, and apparatus for efficiently processing information are disclosed. In some embodiments, this may include creating a first signature of a file, associating a first timestamp with the first signature, creating a second signature of a file, associating a second timestamp with the second signature, comparing the first signature with the second signature, determining if the file has been modified based on the comparison, and identifying a time of modification based on the first timestamp and the second timestamp.

Abstract: A method, article of manufacture, and apparatus for efficiently processing information are disclosed. In some embodiments, this may include creating a first signature index, deriving a second signature index, wherein the second signature index is created by a backup application, comparing the first signature index to a second signature index, determining a positive signature match based on the comparison, and identifying a software application based on the positive signature match.