Test Results for Disk Imaging Tools: EnCase 3.20
June 2003
This NIJ Special Report presents test results of EnCase 3.20, a computer forensic software tool that allows investigators to examine hard drives and disks for deleted, hidden, and/or renamed computer files. It describes the testing environment and 3 anomalies detected during testing; documents test results against 22 test assertions (both mandatory and optional); and includes summary log files of 50 test cases. The results provide information necessary for developers to improve tools, users to make informed choices, and the legal community and others to understand the tools' capabilities.Full text:

