skip navigation

Add your conference to our Justice Events calendar


Register for Latest Research

Stay Informed
Register with NCJRS to receive NCJRS's biweekly e-newsletter JUSTINFO and additional periodic emails from NCJRS and the NCJRS federal sponsors that highlight the latest research published or sponsored by the Office of Justice Programs.

NCJRS Abstract

The document referenced below is part of the NCJRS Library collection. To conduct further searches of the collection, visit the NCJRS Abstracts Database. See the Obtain Documents page for direction on how to access resources online, via mail, through interlibrary loans, or in a local library.

  NCJ Number: NCJ 242138   Add to Shopping cart   Find in a Library
  Title: Test Results for Digital Data Acquisition Tool: FTK Imager CLI 2.9.0_Debian
  Document URL: PDF 
  Corporate Author: Office of Law Enforcement Standards (OLES)
United States of America
  Date Published: 05/2013
  Page Count: 128
  Annotation: As part of the Computer Forensics Tool Testing (CFTT) program, this report presents results from testing FTK Imager CLI 2.9.0_Debian against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0, which is available at the CFTT Web site.
  Abstract: AccessData’s FTK Images CLI v2.9 Debian is designed to image and restore hard drives and other secondary storage. It uses the Debian command line interface to image, clone, and restore acquired data. The testing found that except for the case where a drive with faulty sectors was imaged (test case DA-09), the tool acquired all sectors of the test media completely and accurately. In test cases DA-04 and DA-17, which measure how a tool behaves when the destination media has insufficient space for a clone or restore task, the tool failed to display a message indicating that the destination drive had insufficient space. The testing used for disk imaging tools is described in Digital Data Acquisition Tool Assertions and Test Plan Version 1.0. In order to test a tool, test cases are selected from the Test Plan document based on the tool’s features. Not all test cases or test assertions are appropriate for all tools. There is a core set of base cases that are executed for every tool tested. Tool features guide the selection of additional test cases. One section of the current test report provides justification for the selection of test cases from the set of possible cases. Another section of the report describes in more depth any anomalies summarized in a previous section of the report. The report lists hardware and software used to run the test cases. The report’s concluding section describes each test case run, along with the expected result and the actual result. Extensive tables
  Main Term(s): Police equipment
  Index Term(s): Evidence collection ; Testing and measurement ; Computer related crime ; Computer aided investigations ; Computer evidence ; NIJ grant-related documents
  Sponsoring Agency: National Institute of Justice (NIJ)
US Department of Justice
Office of Justice Programs
United States of America
  Grant Number: 2003-IJ-R-029
  Sale Source: NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America
  Type: Test/Measurement ; Technical Assistance
  Country: United States of America
  Language: English
  To cite this abstract, use the following link:

*A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's website is provided. Tell us how you use the NCJRS Library and Abstracts Database - send us your feedback.