NCJ Number
228980
Date Published
January 2010
Length
22 pages
Annotation
This report presents results from testing Voom Hardcopy II, Version 1-11 against the Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0, which is available at the Computer Forensics Tool Testing (CFTT) Web site.
Abstract
Voom HardCopy II was tested for its ability to overwrite sectors. The test cases selected were limited to only those defined by Forensic Media Preparation Tool Test Assertions and Test Plan Version 1.0 and applicable to features supported by this tool. Since Voom HardCopy II does not support a secure erase mode, those tests were omitted. All selected test cases were WRITE tests. Three hidden sector test cases were included, so as to measure the tool's behavior in conjunction with hidden sectors. In all the test cases run against Voom HardCopy II, Version 1-11, all visible sectors were successfully overwritten. For the test cases that used a destination drive that contained an HPA or DCO, the tool behaved as designed by the vendor. It removed any HPA or DCO and overwrote the sectors with zeros. The test case selection is explained, and test materials are described, including support software as well as test drive creation and analysis. Procedures and results of each of the test cases are presented.