nsrllookup
A command-line tool for digital forensics that checks file MD5 hashes against the NSRL Reference Data Set to identify known software files.
What is nsrllookup?
nsrllookup is a command-line tool that checks MD5 file hashes against the National Software Reference Library's Reference Data Set. It helps digital forensics investigators quickly identify known software files, reducing the volume of data that requires manual examination during investigations.
Digital forensics investigators, incident response teams, and security professionals who need to efficiently triage large collections of files during investigations.
Developers choose nsrllookup for its focused functionality, seamless integration with existing forensic tools, and ability to significantly reduce investigation time by filtering out known software files from evidence collections.
Overview
Checks with NSRL RDS servers looking for for hash matches
Use Cases
Best For
- Reducing false positives in digital forensics investigations
- Triage of large file collections during incident response
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
