[sleuthkit-users] Tool announcement: Forensic Hash Database

[Matthias H. <mat...@mh...>]

Hello list,

I just finished the initial release of my new GPL project called Forensic
Hash Database. The goal of the project is to  combine the various hashsum
sources (NIST NSRL, HashKeeper, KnownGood, Dan Farmer's hashsum archive
etc.) into a single RDBMS (relational database management system).
Currently, the database of choice is PostgreSQL, others may follow.
With an perl-based importer tool, the above mentioned sources may be
imported into the database. By applying a patch to The Sleuth Kit, hfind
and sorter may be used in conjunction with the database.

Next features on the TODO list are:
- an Autopsy (version 2.0) integration patch
- implement hfind as daemon for persistent database connection
- management web gui
- export tool for database export to flatfiles in HashKeeper, NIST
NSRL,graverobber, md5sum/sha1sum format
- update feature for importer

The Forensic Hash database is currently tested on Linux (Debian) systems.

Download: http://www.forinsect.de/forensics/

Feedback, suggestions, ideas etc. are always welcome.

Matthias

-- 
Matthias Hofherr
mail: mat...@mh...
web: http://www.forinsect.de
gpg: http://www.forinsect.de/pubkey.asc