NCJ Number
230566
Date Published
June 2010
Length
29 pages
Annotation
This report presents results from testing Logicube Omniclone 2Xi, a computer forensics investigation tool, for accuracy and effectiveness.
Abstract
Results from all test cases run against Logicube Omniclone 2Xi (software version 1.53 June 19, 2009) indicate that all visible sectors were successfully overwritten. For the test cases that used drives containing an HPA or DCO, the tool behaved as designed by the vendor and did not overwrite. The Computer Forensics Tool Testing (CFTT) program, a joint project of the U.S. Department of Justice, National Institute of Justice (NIJ) and the National Institute of Standards and Technology's Office of Law Enforcement Standards and Information Technology Laboratory, provides measurable assurance to practitioners, researchers, and others that the tools used in computer forensics investigations provide accurate results. This report provides the results from testing Logicube Omniclone 2Xi, against the Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0. The report is divided into five sections. The first section is a summary of the results from the test runs. Section 2 gives justification for the selection of test cases from the set of possible cases defined in the test plan for forensic media preparation tools. Section 3 presents any observed tool behaviors that are not covered by the test plan. Section 4 lists hardware and software used to run the test cases with links to additional information about the items used. Section 5 contains a description of each test case. Tables