NCJ Number
221168
Date Published
January 2008
Length
92 pages
Annotation
This report presents the results of testing the EnCase Version 4.22a digital data acquisition tool used in computer forensic investigations.
Abstract
Results of the testing indicate that except for three test cases (DA-07, DA-08 and DA-09), the tested tool acquired all visible and hidden sectors completely and accurately from the test media without any anomalies. The EnCase Version 4.22a is a digital data acquisition tool used in computer forensic investigations. The Computer Forensics Tool Testing (CFTT), a joint project of the U.S. Department of Justice, National Institute of Justice (NIJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards and Information Technology Laboratory, provides measurable assurance to practitioners, researchers, and others that the tools used in computer forensics investigations provide accurate results. This report presents the results from testing the EnCase Version 4.22a digital data acquisition tool against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.