[Dailydave] NSRL status check

[Holt Sorenson]

On Mon, Dec 11, 2006 at 02:55:32PM -0500, dan at geer.org wrote:
 > 
 > The National Software Reference Library has or had a listing of the
 > hash values for known good software, known good in the sense of
 > what is on installation media or what otherwise still has its
 > integrity intact.
 > 
 > I say "has or had" as on first glance it appears that this listing
 > is stationary since sometime in 2004.  Would someone here know the
 > history and fate of this list? 

The way I read it, the most recent release was made October 2006:
http://www.nsrl.nist.gov/Downloads.htm#isos

 > On the face of it such a list seems useful in forensic situations
 > at least.

Indeed. Most commercial forensic software comes with instructions on
how to use NSRL RDS with the software.

-Holt