Knowledgebase: E3
Installing/Updating Common Files (NIST) Database
Posted by Jack H. Ward on 27 January 2017 02:12 PM

About NIST Hash Database

To expedite working with Electronic Evidence Examiner, you can use the Common Files (NIST) database: This database is created on the base of information provided on the NIST site. The Common Hash (NIST) database is an optimized version of the NIST hashset that contains the hash codes of the known system files. This will help you to eliminate these files from the case view. The imported Common Files (NIST) database is marked with the icon.
The NIST database is not attached to the case separately but imported to Electronic Evidence Examiner. When the Common Files (NIST) database is imported to Electronic Evidence Examiner and can be applied for any case.

The NIST database can be imported to Electronic Evidence Examiner in one of the following ways:

During importing, the Common Files (NIST) database is converted to Electronic Evidence Examiner format (*.nst). The converted database can be imported to Electronic Evidence Examiner by attaching it as general hash databases.

Installing/Updating Common Files (NIST) Database

The Common Files (NIST) database can be installed through the special installation downloaded from https://www.paraben.com/download/products. After installation, the Common Files (NIST) database will be converted to Electronic Evidence Examiner format (*.nst), imported to Electronic Evidence Examiner and automatically attached to any case opened/created in it.

If you have a NIST database, you can easily update it to a new version.

To install/update the Common Files(NIST) database:

  1. Select the NIST2.45 for Electronic Evidence Examiner.exe self-extracting archive on the disc supplied with Electronic Evidence Examiner or download it from the Paraben's site.
  2. Double-click it. Don't change the installation folder, otherwise you'll have to attach the installed database manually. Click Install.
  3. If you have the NIST database installed, you'll have to agree on its updating.
  4. The Common Files (NIST) Database is extracted and imported to Electronic Evidence Examiner. If you have updated the NIST database and have sorted files in the case, you'll be proposed to relink them.
The NIST database requires 3GB of free space.

 

(0 vote(s))
Helpful
Not helpful

Comments (0)