Setup and Test Procedures dd (GNU Fileutils) 4.0.36 Forensic Tests

Published

August 1, 2002

Author(s)

James R. Lyle

Abstract

This document describes the testing of dd (GNU fileutils) 4.0.36 as a disk imaging tool on a Linux platform. The Linux version used was Linux version 2.4.2-2 (Red Hat Linux 7.1 2.96-79). The test cases that were applied are described in Disk Imaging Tool Specification, Version 3.1.6.The tests were run on five 933 Mhz computers. A variety of hard drives (7 different models, 5 major brands) were used for the tests. The source disks (the ones that are copied from) were setup with FAT16, FAT32, NTFS or Linux EXT2 type partitions to represent the most common partition types.The main objective of this document is to provide enough information about the testing process for either an independent evaluation of the process or independent replication of the results. The intended audience for this document should be familiar with the DOS operating system, Linux (or some UNIX like) operating system, computer operation, computer hardware components such as hard drives, hard drive interfaces (e.g., IDE or SCSI) and computer forensics.The document can be obtained from the WWW at the HTTP://WWW.CFTT.NIST.GOV web site.

Citation

Electronic Publication

Volume

1

Pub Weblink

http://www.cftt.nist.gov/setup_for_dd_tests.pdf

Pub Type

Websites

Download Paper

Local Download

Keywords

computer forensics, software testing, software tools

Citation

Lyle, J. (2002), Setup and Test Procedures dd (GNU Fileutils) 4.0.36 Forensic Tests, Electronic Publication, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=151695, http://www.cftt.nist.gov/setup_for_dd_tests.pdf (Accessed December 15, 2024)