Point it at a directory and it will recursively SHA-256 every file underneath, store the digests in a hashes.db manifest, and later verify that nothing has changed — bitrot, silent corruption, ...