Implementing Digital Forensic Readiness, 2nd Edition

Addendum A: Tool and Equipment Validation Program

Introduction

Digital forensics tools and equipment can work differently, and may behave differently, when used on different evidence sources. Before using any tools or equipment to gather or process evidence, investigators must be familiar with how they operate by practicing on a variety of evidence sources.

This testing must demonstrate that these tools and equipment follow the scientifically proven principles, methodologies, and techniques used throughout the digital forensics discipline. This process of testing has established a level of assurance that the tools and equipment being used by digital forensics practitioners are forensically sound and introduce no doubt into the authenticity or ...