DeNIST Settings

Overview

DeNIST helps reduce review volume by identifying known system or application files with no evidentiary value and handling them appropriately during import. During import, files can be evaluated against the National Institute of Standards and Technology (NIST) National Software Reference Library (NSRL) Reference Data Set (RDS).

Each imported file’s MD5 hash (a digital fingerprint of the file) is compared against entries in the NIST NSRL RDS. If a match is found, the file is recognized as a NIST file and handled according to your DeNIST settings.

Configuring DeNIST During Import

The steps below explain how to configure DeNIST settings in both NextGen and Legacy databases.

NextGen Database Legacy Database

DeNIST settings are configured during the Import Details step of the import workflow. From this screen, you can enable or disable DeNIST detection and choose how files that match a NIST record are handled.

DeNIST settings are configured during the Import Data Settings step of the import workflow. From this screen, you can enable or disable DeNIST detection and choose how files that match a NIST record are handled.

DeNIST Detection Options

If DeNIST detection is disabled, no NIST comparison is performed. All files are imported and processed normally, regardless of whether they match a NIST record.

If DeNIST detection is enabled, click the settings icon to choose how files that match a NIST record are handled:

• Tagged: Files that match a NIST record are imported and processed as usual, but are automatically assigned the tag tag:NIST. These files remain available for review and can be filtered or excluded later using search or tag criteria.
• Filtered: Files that match a NIST record are excluded from the import entirely. They are not processed or added to the database.

Import Batch Reporting

When DeNIST detection is enabled, results are recorded on the Import Batch Details page:

• Files that match a NIST record are noted in the batch summary.
• If the DeNIST setting is set to Filtered, excluded files are reported as filtered from the import.
• If the setting is Tagged, imported NIST files can be located using the tag:NIST tag.

Return to: Discovery Workflow