Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Assertions <strong>for</strong> Optional Features - Hidden Sector (HS)<br />
Assertion<br />
ID<br />
TSP-<br />
AHS-01<br />
TSP-<br />
AHS-02<br />
TSP-<br />
AHS-03<br />
Assertion Description<br />
The tool reports to the user if any hidden sectors are<br />
found<br />
The tool reports to the user that digital source may<br />
contain hidden sector but unable to detect it due to<br />
incompatible execution environment and/or access<br />
interface.<br />
The tool reports to the user that hidden sectors will not<br />
be acquired if the tool is unable to acquire hidden<br />
sectors due to incompatible execution environment<br />
and/or access method.<br />
Assertions <strong>for</strong> Optional Features - Image Creation (IC) Function<br />
141<br />
Correspondent<br />
Assertion<br />
(Byers &<br />
Shahmehri,<br />
2009)<br />
SKL-DIA-08<br />
SKL-DIA-09<br />
SKL-DIA-10<br />
SKL-DIA-11<br />
SKL-DIA-12<br />
Assertion ID Assertion Description<br />
Corresponden<br />
t NIST<br />
Assertion<br />
TSP-AIC-01<br />
The data represented by an image file is the same as<br />
the data acquired by the tool<br />
DA-AO-01<br />
TSP-AIC-02<br />
The tool creates an image file according to the file<br />
<strong>for</strong>mat the user specified.<br />
DA-AO-02<br />
TSP-AIC-03<br />
The tool reports to the user if an error occurs during<br />
the image creation process.<br />
The tool reports to the user if insufficient space in<br />
DA-AO-03<br />
TSP-AIC-04 the destination device during the image creation<br />
process.<br />
If multi-file image creation and the image file size<br />
DA-AO-04<br />
TSP-AIC-05 is selected, the tool creates a multi-file image<br />
except that one file may be smaller<br />
If the image file integrity check is selected, the tool<br />
DA-AO-05<br />
TSP-AIC-06 shall report to the user the image file has not been<br />
changed if the image file has not been changed.<br />
If the image file integrity check is selected, the tool<br />
DA-AO-06<br />
TSP-AIC-07 shall report to the user the image file has been<br />
changed if the image file has been changed.<br />
If the image file integrity check is selected, the tool<br />
DA-AO-07<br />
TSP-AIC-08<br />
shall report to the user the image file has been<br />
changed and the involved location if the image file<br />
has been changed.<br />
DA-AO-08<br />
TSP-AIC-09 If image <strong>for</strong>mat conversion is selected, the target DA-AO-09
Change language