Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

List of Tables
Table 2.1: Existing Forensics Investigation Frameworks ................................................. 13
Table 2.2: List of Digital Forensic Software .................................................................... 16
Table 2.3: Characteristics of Digital Evidence ................................................................. 19
Table 2.4: Mandatory Features of Disk Imaging Tools .................................................... 30
Table 2.5: List of Example Hardware-based Disk Imaging Tools ................................... 31
Table 2.6: Functionalities of Selected Disk Imaging Tools .............................................. 38
Table 3.1: Example of Gap Analysis Matrix .................................................................... 65
Table 4.1: Test Stations & Operating Systems ................................................................. 72
Table 4.2: Support Software that used to configure and setup the test drives .................. 73
Table 4.3: TC-01 Result Summary ................................................................................... 74
Table 4.4: TC-02 Result Summary ................................................................................... 75
Table 4.5: TC-03 Result Summary ................................................................................... 76
Table 4.6: TC-05 Result Summary ................................................................................... 76
Table 4.7: TC-06 Result Summary ................................................................................... 77
Table 4.8(1): TC-07 Result Summary .............................................................................. 78
Table 4.8(2): TC-08 Result Summary .............................................................................. 78
Table 4.9: TC-09 Result Summary ................................................................................... 79
Table 4.10: TC-10 Result Summary ................................................................................. 80
Table 4.11: TC-11 Result Summary ................................................................................. 80
Table 4.12: TC-12 Result Summary ................................................................................. 81
Table 4.13: TC-13 Result Summary ................................................................................. 82
Table 4.14: TC-14 Result Summary ................................................................................. 83
Table 4.15: TC-15 Result Summary ................................................................................. 84
Table 4.16: TC-16(1) Result Summary ............................................................................ 84
Table 4.17: TC-16(2) Result Summary ............................................................................ 85
Table 4.18: TC-17 Result Summary ................................................................................. 86
Table 4.19: TC-18 Result Summary ................................................................................. 86
Table 4.20: Summary of Tools Testing Result ................................................................. 89
Table 5.1: Tool Testing Procedure.................................................................................... 95
Table 5.2: Hypotheses Testing ........................................................................................ 106
xi