NCJ Number
218379
Date Published
June 2007
Length
22 pages
Annotation
This report presents the results of testing the FastBloc FE (FireWire Interface), a write block device used in computer forensic investigations.
Abstract
Results from the test are presented by requirements and for all test cases run and include the following: (1) the device always blocked any command that would have changed user or operating system data stored on a protected drive; (2) the device always allowed commands to read the protected drive; (3) the device always returned access-significant information from the protected drive without modification; and (4) the device always returned error codes from the protected drive without modification. The FastBloc FE (FireWire Interface) is a hardware write block device manufactured by Guidance Software, Inc. and is used in computer forensic investigations. The Computer Forensics Tool Testing (CFTT), a joint project of the U.S. Department of Justice, National Institute of Justice (NIJ) and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL), provides measurable assurance to practitioners, researchers, and others that the tools used in computer forensics investigations provide accurate results. This report presents the results from testing the FastBloc FE (FireWire Interface) write blocker against the Hardware Write Blocker (HWB) Assertions and Test Plan Version 1.0.