Softrace
#Incident Management#Digital Forensics
A forensics tool for tracking USB device artifacts on Linux machines.
Softrace: A Simple Golang Application for NSRL RDS
Softrace is a straightforward Golang application designed for storing the NIST National Software Reference Library Reference Data Set (NSRL RDS). It utilizes the Bolt database, which ensures that it is both fast and compact.
The application is capable of performing hash lookup searches
The application can process MD5 and SHA1 hash lookup searches.
Create database file: To create the necessary database file, you first need to download the archive titled Modern RDS Minimal from the Current RDS Hash Sets page at https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds. After downloading, unpack the archive into the directory data/nsrl_rds/rds_modern/. The names of the extracted files should be: NSRLFile.txt, NSRLMfg.txt, NSRLOS.txt, and NSRLProd.txt.
Build Docker image insert_bolt to create the Bolt database using Softrace.