Test Results for Forensic Media Preparation Tool: Voom HardCopy II (Model XLHCPL-2PD Version 1-11)

• NCJ Number: 228980
• Date Published: January 2010
• Length: 22 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Test/Measurement; Guideline

Annotation

This report presents results from testing Voom Hardcopy II, Version 1-11 against the Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0, which is available at the Computer Forensics Tool Testing (CFTT) Web site.

Abstract

Voom HardCopy II was tested for its ability to overwrite sectors. The test cases selected were limited to only those defined by Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0 and applicable to features supported by this tool. Since Voom HardCopy II does not support a secure erase mode, those tests were omitted. All selected test cases were WRITE tests. Three hidden sector test cases were included, so as to measure the tool's behavior in conjunction with hidden sectors. In all the test cases run against Voom HardCopy II, Version 1-11, all visible sectors were successfully overwritten. For the test cases that used a destination drive that contained an HPA or DCO, the tool behaved as designed by the vendor. It removed any HPA or DCO and overwrote the sectors with zeros. The test case selection is explained, and test materials are described, including support software as well as test drive creation and analysis. Procedures and results of each of the test cases are presented.