Test Results for Forensic Media Preparation Tool: Tableau Forensic Duplicator Model TD1 (Firmware Version 3.10)

• NCJ Number: 231622
• Date Published: September 2010
• Length: 22 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Research (Applied/Empirical)

Annotation

This report, prepared by the Office of Law Enforcement Standards of the National Institute of Standards and Technology, presents the results from testing Tableau Forensic Duplicator Model TD1 against the Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0.

Abstract

Results of the test cases run against Tableau Forensic Duplicator Model TD1 show that all visible and hidden sectors of the drives were successfully overwritten. The Tableau Forensic TD1 is a multi-function forensic device that performs a variety of forensic functions that include Disk-to-Disk and Disk-to-File duplication, Format Disk, Wipe Disk, Hash Disk, HPA/DCO Detection and Removal, View/Save/Print Log Files and Blank Disk Check. The test cases discussed in this report cover only disk wiping and removal of HPA/DCO for wiping of hidden sectors. The report is divided into four sections: Section 1 is a summary of the results from the test runs; Section 2 presents a justification for the selection of test cases from the set of possible cases that are defined in the test plan for forensic media preparation tools; Section 3 is a listing of hardware and software used to run the test cases along with links to additional information about the items used; and Section 4 which contains a description of each test case listing all test assertions used in the test case, the expected result and the actual result. Tables