Difference between revisions of "Creating NSRL Hashset"
Jump to navigation
Jump to search
| Line 2: | Line 2: | ||
It consists of several file downloads of CSV files containing hashes of file contents. | It consists of several file downloads of CSV files containing hashes of file contents. | ||
You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them. | You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them. | ||
| + | |||
| + | =How to Create NSRL Hashset= | ||
| + | Follow these steps: | ||
| + | |||
| + | # [https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds Download] the data from NIST | ||
| + | # Unzip or mount the ISO and unzip the <code>NSRLFile.txt</code> | ||
| + | # Run the <code>Truxton\Tools\NSRLMinimalMD5.exe</code> program to create a hashset file <source lang="bat">"C:\Program Files\Truxton\Tools\NSRLMinimalMD5.exe" NSRLFile.txt</source> | ||
| + | # Rename the output file <source lang="bat">ren Out.hashset 1.hashset</source> | ||
| + | # Repeat the above steps until you have produced all of the hashset files from the NSRL downloads. | ||
| + | # Merge the hashset files into a single hashset file <source lang="bat">"C:\Program Files\Truxton\Loader\Load.exe" -mergehashsets Yes 1.hashset 2.hashset 3.hashset 4.hashset 5.hashset 6.hashset</source> | ||
| + | # Rename the merged hashset into what you want <source lang="bat">ren merged.hashset LatestNSRL.hashset</source> | ||
| + | # Replace the existing hashset file for the ETL layer with this new one. | ||
Revision as of 11:52, 28 January 2021
The National Software Reference Library is a project from the National Institute of Standards and Technology. It consists of several file downloads of CSV files containing hashes of file contents. You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them.
How to Create NSRL Hashset
Follow these steps:
- Download the data from NIST
- Unzip or mount the ISO and unzip the
NSRLFile.txt - Run the
Truxton\Tools\NSRLMinimalMD5.exeprogram to create a hashset file"C:\Program Files\Truxton\Tools\NSRLMinimalMD5.exe" NSRLFile.txt - Rename the output file
ren Out.hashset 1.hashset - Repeat the above steps until you have produced all of the hashset files from the NSRL downloads.
- Merge the hashset files into a single hashset file
"C:\Program Files\Truxton\Loader\Load.exe" -mergehashsets Yes 1.hashset 2.hashset 3.hashset 4.hashset 5.hashset 6.hashset - Rename the merged hashset into what you want
ren merged.hashset LatestNSRL.hashset - Replace the existing hashset file for the ETL layer with this new one.
