I'm trying to change a .csv containing 10k+ md5 hashes with various fields into .hash for encase.
I've used a .csv editor to remove all fields, other than the md5 hashes. I'm in the process of turning this .csv format into a format equal to c4p (I have a c4p - .hash converter).
But Surely there is a faster way to turn a load of md5 hashes from .csv into .hash for encase?
Please, someone save me some time with a solution!
explain a little more? if your looking at pulling those hash into encase then there should be a script somewhere that will allow you to do that, the hash need to be within a plain text file with nothing but the hash values in there…
Greetings,
Have you looked on the Guidance Software support forum?
Or checked this forum post
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=2781
It says that a converter was posted to the Guidance support forum?
-David
But Surely there is a faster way to turn a load of md5 hashes from .csv into .hash for encase?
The closest thing I know is an EnPack by Lance Mueller that imports a text file containing filename, size, hash and makes an EnCase hash set out of it. Look overt at ForensicKB for the 'Import Hashes from Text File.EnPack'.
However … as it is an EnPack, you can't examine the source. Decide for yourself if you want to run that kind of code.
If you can massage the CSV file into something close to the NSRL RDS hash set format, you can import that into EnCase directly.
But Surely there is a faster way to turn a load of md5 hashes from .csv into .hash for encase?
The closest thing I know is an EnPack by Lance Mueller that imports a text file containing filename, size, hash and makes an EnCase hash set out of it. Look overt at ForensicKB for the 'Import Hashes from Text File.EnPack'.
However … as it is an EnPack, you can't examine the source. Decide for yourself if you want to run that kind of code.
If you can massage the CSV file into something close to the NSRL RDS hash set format, you can import that into EnCase directly.