To respond to various computer security breaches and perform a proper forensics investigation, it is important to ensure that tried and true tools and software are utilized. Tool testing provides a confirmation that the tool or software that you are using to perform a forensic investigation is performing the actions that you intend and nothing more.
The U.S. National Institute of Standards and Technology (NIST) has a rigorous testing program for computer forensic tools and equipment.
You can review and learn more about the NIST Tool Testing Program by visiting: http://www.cftt.nist.gov
For this assignment, you are asked to prepare a written report that includes the following three sections:
- Provide an overview of the NIST Computer Forensic Tool Testing program and its usefulness to computer forensic investigators.
- Describe in detail the work that NIST has done in testing “disk imaging” and “deleted file recovery” tools.
- Describe the significance and importance of the various computer forensics offerings from NIST as shown on this site: http://www.nist.gov/itl/ssd/computerforensics.cfm