January 12, 2012: KHracker-0.3-1.noarch.rpm - KHracker is a python-based decryption tool for encrypted known_hosts entries. It will
attempt to decrypt values stored in SSH known_hosts files, if the encryption option has been enabled for that computer. By default, known_hosts
entries are not encrypted, but there is an option to do so. From a forensics perspective, encrypted known_hosts entries can prevent an
investigator from seeing other computers to which a user may have been connecting. Information about the connections made from a system can be integral to
identifying a complete understanding of the systems involved in a network intrusion or incident response case.