Test Results: FTK Imager CLI 2.9.0_Debian

In partnership with the National Institute of Standards and Technology (NIST), NIJ recently announced the release of the following computer forensic tool testing (CFTT) special report:

Test Results for Digital Data Acquisition Tool: FTK Imager CLI 2.9.0_Debian

This document reports the results from testing FTK Imager CLI 2.9.0_Debian against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.

From the Results Summary:

AccessData’s FTK Imager CLI v2.9 Debian is designed to image and restore hard drives and other secondary storage. It uses the Debian command line interface to image, clone and restore acquired data. Except for the case where a drive with faulty sectors was imaged (test case DA-09), the tool acquired all sectors of the test media completely and accurately. In test cases DA-04 and DA-17 that measure how a tool behaves when the destination media has insufficient space for a clone or restore task, the tool failed to display a message indicating that the destination drive had insufficient space.

Click here to download the report. <https://ncjrs.gov/pdffiles1/nij/242138.pdf>

Or view all Computer Forensic Tool Testing reports from the NIJ.

 
Next >






Digital-Image Management at Mass Gravesites

SKELETONIZED REMAINS that were carefully unearthed from the desert sands of Iraq tell their own story: the bones of an adult, still dressed in a woman’s apparel, lie supine. The skull is perforated by a bullet hole. Tucked in the space between the ribs and the left humerus is a much smaller skeleton, bones in the skull un-fused, and the fully clothed body partially swaddled in a blanket.

Read more...