Forensic Tool Validation

 

Videos:

• Introduction Forensic Tool Validation (Pollitt)
• Introduction Forensic Tool Validation (Craiger)
• Creating Media for Validation Testing (Craiger)
• Example of Validation Testing (Craiger)
• Tools
• Overview of FTK Imager such as adding a drive, creating a hash of a drive, and creating a disk image.
• Overview of creating an image and file hashes using ProDiscover 
• How to image and verify a drive using Linux. Use dd to image a drive in Linux, obtain file information with file, and multiple methods to create and view hashes.

Slides:

• Introduction to Digital Forensic Tools

 

Readings

• Chapter 7 (notes)
• FTK Validation Example