Skip to local navigation | Skip to main content

Publications

Viewing Content

Viewing some content on this page may require a free plugin application.

 

Test Results for Disk Imaging Tools: EnCase 3.20

June 2003
This NIJ Special Report presents test results of EnCase 3.20, a computer forensic software tool that allows investigators to examine hard drives and disks for deleted, hidden, and/or renamed computer files. It describes the testing environment and 3 anomalies detected during testing; documents test results against 22 test assertions (both mandatory and optional); and includes summary log files of 50 test cases. The results provide information necessary for developers to improve tools, users to make informed choices, and the legal community and others to understand the tools' capabilities.