Test Results for Hardware Write Block Device: Tableau T5 Forensic IDE Bridge (FireWire Interface)

• NCJ Number: 218381
• Date Published: June 2007
• Length: 22 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Report (Technical)

Annotation

This report presents the results of testing the Tableau T5 Forensic IDE Bridge (FireWire Interface) a hardware write block device used in computer forensic investigations.

Abstract

Results of the testing indicate the following for all test cases run on the Tableau T5 Forensic IDE Bridge (FireWire Interface): (1) the device always blocked any commands that would have changed user or operating system data stored on a protected drive; (2) the device always allowed commands to read the protected drive; (3) the device always returned access-significant information from the protected drive without modification; and (4) the device always returned error codes from the protected drive without modification. The Tableau T5 Forensic IDE Bridge (FireWire Interface) is a hardware write block device/tool used in computer forensic investigations. The Computer Forensics Tool Testing (CFTT), a joint project of the U.S. Department of Justice, National Institute of Justice (NIJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL), provides measurable assurance to practitioners, researchers, and others that the tools used in computer forensics investigations provide accurate results. This report presents the results from testing the Tableau T5 Forensic IDE Bridge (FireWire Interface) write blocker against the Hardware Write Blocker (HWB) Assertions and Test Plan Version 1.0.