Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

4.5 CONCLUSION
Chapter 4 concentrates on reporting the various findings during the process of
evaluating the tools. Certain variations of what is defined in Chapter 3 were expected
during the evaluation. The main focus of Chapter 4 is on reporting and comparing the
evaluation results of the three tested tool in each test scenario, as well as across all
tests.
Chapter 4 outlines the variations in research specifications defined in Chapter
3. The findings about the test environment are described in section 4.2.1. Total of 18
test cases are reported but not all of the evaluated tools underwent all 18 test cases.
Some test cases only applied to one or two tools. Each test scenario is illustrated with
a table that summarises the failed assertions and the pass rate of that particular test
case. In section 4.3, GA is applied on the test results of the disk imaging tools to study
the gaps between the pre-defined requirements and the actual performance of the tool.
A separate table that summarises the test results of all test scenarios is also presented
in Table 4.20.
Figures from 4.1 to 4.4 are visual representations of the summary Table 4.20
and they present the individual test results of the test cases. The findings of the
evaluation are discussed in detail in Chapter 5. They are also use as evidence to test
the hypotheses and answer the research question.
91