After upgrading to RSA NetWitness Investigator 9.8.5.20, session reconstruction does not correctly display MD5 file hashes.

Document created by pinnas Employee on Sep 30, 2014
Version 1Show Document
  • View in full screen mode

Product:

RSA NetWitness Investigator


Description:            

After upgrading to RSA NetWitness Investigator 9.8.5.20, session reconstruction does not correctly display MD5 file hashes.


After upgrading to Windows client RSA NetWitness Investigator Enterprise Edition (EE) v9.8.5.20, session reconstruction is displaying the MD5 hash of all files as 00000000000000000000000000000000.

 

Cause:

A bug was introduced into RSA NetWitness Investigator v9.8.5.20 which will be resolved in future versions of Investigator.


Resolution:

The workaround is to downgrade to a lower version of Investigator such as v9.8.5.19 until a new version of RSA NetWitness Investigator is released.

Attachments

    Outcomes