Program to Identify and Resolve Forensic Imaging Bottlenecks

CyanLine application proposes to isolate bottlenecks and identify answers by performing research on the performance of the components involved in acquiring digital forensic evidence. The testing will examine the impacts of different source media, different output file systems, different output file types, inline hashing vs. post-hashing, bus-type (USB, Firewire, IDE, and SATA) and error recover. The output of this research will be a research paper identifying the findings. The paper will also make recommendations on methods to alleviate evidence acquisition bottlenecks thus greatly improving the digital evidence fornsic process.

ca/ncf