Digital Forensics Using Hashsets
National Software Reference Library

Douglas White
National Institute of Standards and Technology
Email: nsrl@nist.gov

Background
       Project Goals

Shelves full of Software
       Library Contents
       "Known" Files

Database full of Information
       Database Contents

CDs full of Hashes
       Distribution CDs
       Distributed to Who?

Using what you Need
       Subsets
       Conversions to Hashkeeper, Ilook, old NSRL
       Setting HK Notable Flag

Research
       Installed Hashes
       Block Hashes
       Open Source Distribution
       Cluster Framework
       Bloom Filters
       Hot Media Images

Q & A and Demos
       Steal This Talk