Test Results: FTK Imager CLI 2.9.0_Debian

In partnership with the National Institute of Standards and Technology (NIST), NIJ recently announced the release of the following computer forensic tool testing (CFTT) special report:

Test Results for Digital Data Acquisition Tool: FTK Imager CLI 2.9.0_Debian

This document reports the results from testing FTK Imager CLI 2.9.0_Debian against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.

From the Results Summary:

AccessData’s FTK Imager CLI v2.9 Debian is designed to image and restore hard drives and other secondary storage. It uses the Debian command line interface to image, clone and restore acquired data. Except for the case where a drive with faulty sectors was imaged (test case DA-09), the tool acquired all sectors of the test media completely and accurately. In test cases DA-04 and DA-17 that measure how a tool behaves when the destination media has insufficient space for a clone or restore task, the tool failed to display a message indicating that the destination drive had insufficient space.

Click here to download the report. <https://ncjrs.gov/pdffiles1/nij/242138.pdf>

Or view all Computer Forensic Tool Testing reports from the NIJ.

Next >

Lifting Latent Fingerprints from Difficult Surfaces

ALMOST ANYONE can find, process, and lift a latent print that happens to be in a logical and obvious place like a door handle, a beer can, or a butcher knife. But sometimes, a latent print is not just sitting there in a logical and obvious place. Sometimes, you have to use your imagination to find the print and your skills to lift it.