U.S. flag
      An official website of the United States government, Department of Justice.
        Here's how you know
      Here's how you know**Official websites use .gov**
            
            A **.gov** website belongs to an official government organization in the United States.
      **Secure .gov websites use HTTPS**
            
            A **lock** (
            A locked padlock
            ) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. Menu

      
        close

            
            
                                              About NIJ
        
                    
  
          About NIJ
      
    
          The NIJ Director
          How NIJ Is Organized
          Mission and Guiding Principles
          Research and Development Process
          Strategic Framework
          Assessments of NIJ
          Annual Reports & Reports to Congress
          Staff Directory
          Funding & Awards
        
                    
  
          Funding & Awards
      
    
          Current Funding
          Forthcoming Funding
          Expired Funding
          Awards: Listing of Funded Projects
          Guidance for Applicants and Awardees
          Fellowship & Student Programs
          Travel Scholarships
          NIJ Challenge Program
          Library & Multimedia
        
                    
  
          Library & Multimedia
      
    
          NIJ Journal
          Podcasts
          Publications Listing
          Multimedia Listing
          Rated Practices on CrimeSolutions
          Rated Programs on CrimeSolutions
          Software & Databases
          Datasets
          Patents
          Topics
        
                    
  
          Topics
      
    
          Article Listing
          Corrections
          Courts
          Crime Prevention
          Crimes
          Drugs and Crime
          Equipment and Technology
          Forensic Sciences
          Youth Justice
          Justice System Reform
          Law Enforcement
          Tribal Crime and Justice
          Victims of Crime
          Events
        
                    
  
          Events
      
    
          NIJ 2024 Research Conference
          Scheduled Events
          On-Demand Events
          Research Meetings & Workshops
          NIJ-Hosted Online Training

                            
                                About
          Contact Us
          Subscribe
          Topics A-Z
                  Share
FacebookXLinkedInRedditPinterestEmail Home
                            Library & Multimedia
 Technical Evaluation and Legal Opinion of Warden: A Network Forensics Tool, Version 1.0
NCJ Number
              252944

Author(s)
          Rod  Yazdan;
                        Newton  McCollum;
                        Jennifer  Ockerman
Date Published

October 2018
Length
              95 pages
Annotation
              Findings and methodology are presented for the evaluation of the forensic electronic data collection tool called "Wide-scale, Agentless and Rapid collection of Digital Evidence from Networks" (WARDEN) developed by Assured Information Security, Inc.
Abstract
              The evaluation determined 1) how WARDEN identifies, acquires, and preserves data of investigative value; 2) WARDEN's analysis and reporting capabilities regarding investigative data; 3) whether WARDEN's functions operate as intended; 4) whether WARDEN is forensically sound, and if not, how it can be improved to achieve this; and 5) the pros and cons of other forensic solutions. An initial technical review of WARDEN conducted to understand and document its capabilities determined that it is not forensically sound; e.g., it does not encrypt stored information or create an audit trail to assist with chain-of-custody control. In addition, WARDEN data analysis does not apparently meet the needs of law enforcement personnel, since it provides summarized information that does not permit organization of data by case. Because of these initial findings, the evaluation of WARDEN focused on explaining the shortcomings of WARDEN and possible improvements. Also, a legal opinion was documented on the requirements for a forensically sound digital evidence-collection tool. The legal opinion is appended and notes that WARDEN will likely provide data and information that is admissible in court, but since it does not allow for adequate chain-of-custody control, the resulting data and information is less valuable as persuasive evidence. Although WARDEN does not produce information of probative value, it may be useful as an investigative tool in identifying entities for formal search. 28 tables, 15 figures, and 13 references
      
  
          Additional Details
Grant Number(s)
        2013-MU-CX-K111
                                2015-IJ-CX-K003


  
  
        
  Agencies
        NIJ-Sponsored


  
  
        
  Publication Type
        Research (Applied/Empirical)
                                Report (Study/Research)
                                Report (Grant Sponsored)
                                Program/Project Evaluation
                                Program/Project Description


  
  
        
  Award
        Establishing a National Criminal Justice Technology Research, Test and Evaluation Center
                                Wide-scale, Agentless, and Rapid collection of Digital Evidence from Networks (WARDEN)
    
  
  
Date Published: October 1, 2018
    
          Downloads
        
                      PDF

Side navigation
  

        

  
  
              NIJ Journal
    
      
            
            
            
      Podcasts
    
      
            
            
            
      Publications Listing
    
      
            
            
            
      Multimedia Listing
    
      
            
            
            
      Rated Practices on CrimeSolutions
    
      
            
            
            
      Rated Programs on CrimeSolutions
    
      
            
            
            
      Software & Databases
    
      
            
            
            
      Datasets
    
      
            
            
            
      PatentsRelated Topics
        
                Computer related crime
        Crime Scene
        Digital evidence forensics
        Forensic laboratories
        Forensic sciences



  
Similar Publications
        
                      Commentary On: Thompson WC. Uncertainty in Probabilistic Genotyping of Low Template DNA: A Case Study Comparing STRmixTM and TrueAlleleTM
                  States’ School Safety Centers: A Brief Look Into History, Characteristics, and Activities
                  Interactive Map: Medicolegal Death Investigation Data Flow
 Top

      National Institute of Justice

        
        
                        About NIJ
                    About NIJ
      
    
                  How NIJ Is Organized
      
    
                  NIJ Director
      
    
                  Research Disclaimer
      
    
                  Funding & Awards
                    Funding & Awards Home
      
    
                  Awards Listing
      
    
                  Current Funding
      
    
                  Guidance for Applicants and Awardees
      
    
                  Resources
                    Events
      
    
                  Podcasts
      
    
                  Publications
      
    
                  Topics
      
    
                  Multimedia
      
    
                  Reuse Policy
      
    
                  Contacts
                    Contact NIJ
      
    
                  Staff Directory
      
    
                  Submit a FOIA Request
      
    
                  File a Civil Rights ComplaintFacebook
          
                      X
          
                      YouTube
  

      810 7th St. NW, Washington, D.C. 20531
      
              Secondary Footer link menu
            Accessibility
              Plain Language
              Privacy Policy
              Legal Policies and Disclaimer
              No FEAR Act
              Freedom of Information Act
              USA.gov
              Justice.gov