search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.43k stars 595 forks source link

Hash Set #7736

Closed ghost closed 1 year ago

ghost commented 1 year ago

tsk_hdb_open error determining hash database type

The hash set data is saved as NSRLBad.txt is in the following format:

"SHA-1","MD5","FileName","FileSize","ProductCode","OpSystemCode","SpecialCode" "000020B920DC5B5D568CFB9D849A9F0AB1477B6D","903FB8F94BE1C6BD7F546746B8C0AAD0","GUS.ASM",27460,690,"0","" "0001AF2D6F9D61518AF1E98EF53990B51AFF7745","D63016DAEA3333604FEB7F8796DD188D","PMODE2.DOC",16375,690,"0","" "000275C992E66FA846B63692B19753E71591FFC8","01590DED061C9A67568735CE1300CF39","misc crimes.txt",3282,690,"0",""

ghost commented 1 year ago

I used an alternative method to fix the issue. I converted the file contents into the following format: [md5sum] [some whitespace] [filename] Ex: 486A6DC04542D169B1C344A9752B1FD9 198.26 18D78128AB238C251925AF6C0070E942 2FOR1.CPO 2AC1E482820AF848BFBC0E003FBA8118 47362.GIF

This issue can now be closed, atleast for me.

Thanks & Regards, Yudish