La struttura di PTK is now defined, the next phase of Beta testing involves the optimization of the features and resolving possible bugs or deficiencies. This process will lead to the development of the stable version of the instrument towards the end of September 2008. For this reason, in addition to internal testing, we are starting a validation process based on examination of 13 files, ad-hoc re-created by Brian Carrier, present address: dftt.sourceforge.net . This process aims to strengthen the capabilities of PTK making it the most effective way possible during its investigation and adding only essential features such as form data carving.
Extended DOS Partition Test ( passed )
Partiamo con il primo test di riconoscimento partizioni basato su DOS a seguito di modifica manuale della Partition Table. Riportiamo la descrizione dell'immagine e il risultato di PTK.
" Most DOS partition tools will not allow the user to create a third entry in an extended partition. A test image was created by modifying the partition table by hand with a hex editor and the system was booted. Both Windows and Linux read the third entry in the extended partition table and allowed the user to mount the partition. This test was to verify that forensic tools also allowed the investigator to view the partition in the third entry. "
Extended DOS Partition Test ( passed )
Partiamo con il primo test di riconoscimento partizioni basato su DOS a seguito di modifica manuale della Partition Table. Riportiamo la descrizione dell'immagine e il risultato di PTK.
" Most DOS partition tools will not allow the user to create a third entry in an extended partition. A test image was created by modifying the partition table by hand with a hex editor and the system was booted. Both Windows and Linux read the third entry in the extended partition table and allowed the user to mount the partition. This test was to verify that forensic tools also allowed the investigator to view the partition in the third entry. "
0 comments:
Post a Comment