Rapid Forensic Acquisition of Large Media with Sifting Collectors

AFA - The original purpose of this award was to develop a tool for forensic acquisition of digital media that only images regions expected to contain evidence while bypassing irrelevant regions, such as unallocated space. Forensic acquisition using this method will result in a sifted, compressed disk image, which can be used by existing forensic tools in place of a standard disk image.

Note: “This project contains a research and/or development component, as defined in applicable law," and complies with Part 200 Uniform Requirements - 2 CFR 200.210(a)(14).

NCA/NCF