Thread: [sleuthkit-users] NIST NSRL hash databases, do i concatenate?

Brought to you by: carrier

sleuthkit-users

[sleuthkit-users] NIST NSRL hash databases, do i concatenate?

From: Aaron P. <aa...@al...> - 2004-07-29 14:03:27

I downloaded the 4 ISO images for the NIST NSRL hash databases.  Do I
concatenate the databases (NSRLFile.txt) to use with "sorter"?  which
files do I concatenate?

i mainly want to use the OS database and known applications database.

Aaron

Re: [sleuthkit-users] NIST NSRL hash databases, do i concatenate?

From: Brian C. <ca...@sl...> - 2004-07-29 15:11:22

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Jul 29, 2004, at 9:03 AM, Aaron Peterson wrote:

> I downloaded the 4 ISO images for the NIST NSRL hash databases.  Do I
> concatenate the databases (NSRLFile.txt) to use with "sorter"?  which
> files do I concatenate?

yea, concat the big NSRLFile.txt files.

> i mainly want to use the OS database and known applications database.

You can add only the ones that you want.

brian


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBCROJOK1gLsdFTIsRAiOhAJ0Us/zhLBm4zVacjzOPwZyz8UzRkwCfS0Ut
qV7P8sqDSutR3Vf6R5jNSNM=
=T08K
-----END PGP SIGNATURE-----