Test Results: FTK Imager CLI 2.9.0_Debian

In partnership with the National Institute of Standards and Technology (NIST), NIJ recently announced the release of the following computer forensic tool testing (CFTT) special report:

Test Results for Digital Data Acquisition Tool: FTK Imager CLI 2.9.0_Debian

This document reports the results from testing FTK Imager CLI 2.9.0_Debian against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.

From the Results Summary:

AccessData’s FTK Imager CLI v2.9 Debian is designed to image and restore hard drives and other secondary storage. It uses the Debian command line interface to image, clone and restore acquired data. Except for the case where a drive with faulty sectors was imaged (test case DA-09), the tool acquired all sectors of the test media completely and accurately. In test cases DA-04 and DA-17 that measure how a tool behaves when the destination media has insufficient space for a clone or restore task, the tool failed to display a message indicating that the destination drive had insufficient space.

Click here to download the report. <https://ncjrs.gov/pdffiles1/nij/242138.pdf>

Or view all Computer Forensic Tool Testing reports from the NIJ.

 
Next >






Image Clarification Workflow

A FEW WEEKS AGO, I received a call from Ocean Systems asking if I would like to beta test their newest software—ClearID v2.0 Image Clarification Workflow. The new progam has filters that were designed for use with Adobe’s Photoshop graphics-editing program.

Read more...