Test Results for Digital Data Acquisition Tool: EnCase 4.22a

• NCJ Number: 221168
• Date Published: January 2008
• Length: 92 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Program/Project Evaluation

Annotation

This report presents the results of testing the EnCase Version 4.22a digital data acquisition tool used in computer forensic investigations.

Abstract

Results of the testing indicate that except for three test cases (DA-07, DA-08 and DA-09), the tested tool acquired all visible and hidden sectors completely and accurately from the test media without any anomalies. The EnCase Version 4.22a is a digital data acquisition tool used in computer forensic investigations. The Computer Forensics Tool Testing (CFTT), a joint project of the U.S. Department of Justice, National Institute of Justice (NIJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards and Information Technology Laboratory, provides measurable assurance to practitioners, researchers, and others that the tools used in computer forensics investigations provide accurate results. This report presents the results from testing the EnCase Version 4.22a digital data acquisition tool against the Digital Data Acquisition Tool Assertions and Test Plan Version 1.0.