Difference between revisions of "Creating NSRL Hashset"
Jump to navigation
Jump to search
| Line 3: | Line 3: | ||
You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them. | You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them. | ||
| − | =How to Create NSRL | + | =How to Create NSRL Hash Set= |
Follow these steps: | Follow these steps: | ||
# [https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds Download] the data from NIST | # [https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds Download] the data from NIST | ||
# Unzip or mount the ISO and unzip the <code>NSRLFile.txt</code> | # Unzip or mount the ISO and unzip the <code>NSRLFile.txt</code> | ||
| − | # Run the <code>Truxton\Tools\NSRLMinimalMD5.exe</code> program to create a | + | # Run the <code>Truxton\Tools\NSRLMinimalMD5.exe</code> program to create a [[Hash Set|hash set]] file <source lang="bat">"C:\Program Files\Truxton\Tools\NSRLMinimalMD5.exe" NSRLFile.txt</source> |
# Rename the output file <source lang="bat">ren Out.hashset 1.hashset</source> | # Rename the output file <source lang="bat">ren Out.hashset 1.hashset</source> | ||
| − | # Repeat the above steps until you have produced all of the | + | # Repeat the above steps until you have produced all of the [[Hash Set|hash set]] files from the NSRL downloads. |
# Merge the hashset files into a single hashset file <source lang="bat">"C:\Program Files\Truxton\Loader\Load.exe" -mergehashsets Yes 1.hashset 2.hashset 3.hashset 4.hashset 5.hashset 6.hashset</source> | # Merge the hashset files into a single hashset file <source lang="bat">"C:\Program Files\Truxton\Loader\Load.exe" -mergehashsets Yes 1.hashset 2.hashset 3.hashset 4.hashset 5.hashset 6.hashset</source> | ||
# Rename the merged hashset into what you want <source lang="bat">ren merged.hashset LatestNSRL.hashset</source> | # Rename the merged hashset into what you want <source lang="bat">ren merged.hashset LatestNSRL.hashset</source> | ||
| − | # Replace the existing | + | # Replace the existing [[Hash Set|hash set]] file for the ETL layer with this new one. |
Revision as of 11:14, 1 June 2021
The National Software Reference Library is a project from the National Institute of Standards and Technology. It consists of several file downloads of CSV files containing hashes of file contents. You can use this library to determine the source of a hash (which software package it came from) or, in the case of Truxton, eliminate files that will have no evidence in them.
How to Create NSRL Hash Set
Follow these steps:
- Download the data from NIST
- Unzip or mount the ISO and unzip the
NSRLFile.txt - Run the
Truxton\Tools\NSRLMinimalMD5.exeprogram to create a hash set file"C:\Program Files\Truxton\Tools\NSRLMinimalMD5.exe" NSRLFile.txt - Rename the output file
ren Out.hashset 1.hashset - Repeat the above steps until you have produced all of the hash set files from the NSRL downloads.
- Merge the hashset files into a single hashset file
"C:\Program Files\Truxton\Loader\Load.exe" -mergehashsets Yes 1.hashset 2.hashset 3.hashset 4.hashset 5.hashset 6.hashset - Rename the merged hashset into what you want
ren merged.hashset LatestNSRL.hashset - Replace the existing hash set file for the ETL layer with this new one.
