GENERAL INFORMATION
TECHNICAL INFORMATION
Privacy Policy/Security Notice
NIST is an agency of the Date created:
8/20/2003 Technical comments: nsrl@nist.gov Website comments: web897@nist.gov
|
Downloads
On this page, we will make links available to hashsets,
to source code, and to executable tools produced by the NSRL.
ISO 9660 images of RDS CDs
If you have a fast Internet connection, you may download ISO 9660 image
files and burn your own copy of the RDS CDs.
Be aware that the ISO image files are each approximately 300MB in size.
The RDS,
from RDS 2.20 onward, does not support the categorization used in previous
releases. For example, you cannot use CD "B" for exclusion of
known operating system applications, as was possible previously. CD "B" 4000000000000000000000000000000000000000 CD "C" 8000000000000000000000000000000000000000 CD "D" C000000000000000000000000000000000000000 See the description
of the RDS contents for details
RDS 2.39 , December 2012 The following DVD ISO contains a zip file which holds a single set of RDS files. The format of the DVD ISO is the same as
as any CD ISO above. The DVD zipped files hold all the information in the RDS. Special
consideration needs to be taken into account when unzipping the archive contained on this ISO. The main hash
text file "NSRLFile.txt" is larger than 9 GB when decompressed. You will have to make sure your operating system
can handle files of this size before you decompress the zip file. Furthermore some of the compression tools that
come pre-packaged with Windows and OS X cannot decompress this archive due to a limitation in their decompression
libraries.
If you wish to preview the contents, you may download three smaller files without the hash metadata.
These files conform to the NSRL data format.
Be aware that the converted ZIP files are each between 1.00 and 2.00 GB in size. FTK users -- the KFF tool at AccessData's support page uses the most recent RDS data. If you are enountering extremely low (under 10%)
exclusion of known files from Windows 7 cases, this KFF should boost exclusions to 90%.
It is your responsibility to verify the ISO image
files with the signatures and file sizes once they are downloaded. After
you have used the image to create a CD, it is your responsibility to verify
the data files on that CD with the signatures provided on that CD.
A "minimal" hashset is available which contains only 29,311,203 file hashes.
This set only lists one example of every file in the NSRL. It cannot
be used to determine all possible sources of a file.
Minimal set (1.8GB)
A "unique" hashset is available which contains only 17,045,584 file hashes.
This set lists the files that appear only once in the entire NSRL collection.
Unique set (1.1GB)
Converting RDS format to
other formats
There is a Windows GUI tool
HashConverter.zip that the NSRL is allowed redistribute.
You can pick up the NSRL Perl conversion code at
rds2hk.zip
Mappings of File SHA-1s to Path/File
names
The project was not initially collecting the full
path information for all of the files on all of the media in the NSRL collection,
but we have some of that data, and it is available here.
You can download a zipped
text file, NSRLLocn.txt, which contains the SHA-1, AppID, MediaID, and
full path string for 28,569,382 files as of Jan. 7, 2004.
The SHA-1 of the zip file is 7E0B63CDFDBAC7D4664057F15FC7AC66ABE0E2EB
and the MD5 is 59C2AB12EBB966C7F984B63D4C057B20 . The size is 460 MB.
|