Re: [sleuthkit-users] NSRL question

[Brian C. <ca...@sl...>]

Mike,

You want to have one big NSRLFile.txt file.  I'm not sure of the 
details of all of the NSRL versions, but some of the distributions have 
multiple NSRLFile.txt files because they don't all fit on once CD.  
Concatenate the NSRLFile.txt files together into one file and give that 
location to Autopsy.  So, it would be something like:

cat NSRLFile-1.txt NSRLFile-2.txt > NSRLFile.txt

That database will need to be indexed by Autopsy / Sleuth Kit and then 
it can be used.

brian


On Wednesday, December 31, 2003, at 04:38  PM, Michael Dundas wrote:
> I've been using autopsy for some time now, but not with the NSRL 
> database.  I've downloaded the entire database, format-15.  It is in 
> many ZIP files.  How does one make this work with autopsy?  I know you 
> indicate the location of the NSRL DB during installation, but what is 
> one to do with all these zip files?  Do you unzip them all, then 
> append the data in the files in the zip files to one big file? If 
> there are scripts written to do this, I'd like to know where one can 
> get a copy?  If not, happy to write them, but don't understand the end 
> goal?  Maybe I'm making this too complicated.  Any help appreciated.