Previous Topic: Deploy a NIST DatabaseNext Topic: RDS Version


What is a NIST Database?

Also known as the National Software Reference Library (NSRL), the NIST database contains known benign and malicious files. The database is maintained by the National Institute of Standards and Technology (NIST). From the NIST Web site:

"The NSRL provides a repository of known software, file profiles, and file signatures for use by law enforcement and other organizations in computer forensics investigations."

The purpose of the NSRL is to ease the burden of investigating computer files. A typical desktop computer can contain over 100,000 files, so investigators need to eliminate as many known files as possible from having to be reviewed. For further details, see the NIST Web site: http://www.nsrl.nist.gov