Test Results: FTK Imager CLI 2.9.0_Debian

In partnership with the National Institute of Standards and Technology (NIST), NIJ recently announced the release of the following computer forensic tool testing (CFTT) special report:

Test Results for Digital Data Acquisition Tool: FTK Imager CLI 2.9.0_Debian

This document reports the results from testing FTK Imager CLI 2.9.0_Debian against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.

From the Results Summary:

AccessData’s FTK Imager CLI v2.9 Debian is designed to image and restore hard drives and other secondary storage. It uses the Debian command line interface to image, clone and restore acquired data. Except for the case where a drive with faulty sectors was imaged (test case DA-09), the tool acquired all sectors of the test media completely and accurately. In test cases DA-04 and DA-17 that measure how a tool behaves when the destination media has insufficient space for a clone or restore task, the tool failed to display a message indicating that the destination drive had insufficient space.

Click here to download the report. <https://ncjrs.gov/pdffiles1/nij/242138.pdf>

Or view all Computer Forensic Tool Testing reports from the NIJ.

Next >


ONE OF THE CHALLENGES of writing and editing a magazine is telling a story in a relatively small amount of space. Sometimes it seems like there is never enough room to say everything that needs to be said. I find myself making tough decisions about what parts stay and what parts go.