U.S. flag
        An official website of the United States government
          Here’s how you know
        Here’s how you know**Official websites use .gov**
              
              A **.gov** website belongs to an official government organization in the United States.
        **Secure .gov websites use HTTPS**
              
              A **lock** (  A locked padlock
) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. https://www.nist.gov/itl/ssd/software-quality-group/computer-forensics-tool-testing-program-cftt/cftt-general-0
  Search NIST
    Search
              Menu

      


Close
    Topics
        All Topics
                                                        Advanced communications
                                                        Artificial intelligence
                                                        Bioscience
                                                        Buildings and construction
                                                        Chemistry
                                                        Climate
                                                        Cybersecurity
                                                        Electronics
                                                        EnergyEnvironment
                                                        Fire
                                                        Forensic science
                                                        Health
                                                        Information technology
                                                        Infrastructure
                                                        Manufacturing
                                                        Materials
                                                        Mathematics and statisticsMetrology
                                                        Nanotechnology
                                                        Neutron research
                                                        Performance excellence
                                                        Physics
                                                        Public safety
                                                        Resilience
                                                        Standards
                                                        Transportation
            Publications
            Labs & Major Programs
        Laboratories
                                Communications Technology Laboratory
                                  Engineering Laboratory
                                  Information Technology Laboratory
                                  Material Measurement Laboratory
                                  Physical Measurement LaboratoryUser Facilities
                                NIST Center for Neutron Research
                                  CNST NanoFab
                                                        Research Test Beds
                                                        Research Projects
                                                        Tools & InstrumentsMajor Programs
                                Baldrige Performance Excellence Program
                                  CHIPS for America Initiative
                                  Manufacturing Extension Partnership (MEP)
                                  Office of Advanced Manufacturing
                                  Special Programs Office
                                  Technology Partnerships Office
            Services & Resources
        Standards and Measurements
                                Calibration Services
                                  Laboratory Accreditation (NVLAP)
                                  Quality System
                                  Standard Reference Materials (SRMs)
                                  Standards.gov
                                  Time Services
                                  Office of Weights and MeasuresSoftware
                                                        Data
                                Chemistry WebBook
                                  National Vulnerability Database
                                  Physical Reference Data
                                  Standard Reference Data (SRD)
                                                        Storefront
                                                        License & PatentsComputer Security Resource Center (CSRC)
                                                        NIST Research Library
            News & Events
        News
                                                        Events
                                                        Blogs
                                                        Feature Stories
                                                        AwardsVideo Gallery
                                                        Image Gallery
                                                        Media Contacts
            About NIST
        About Us
                                Leadership
                                  Organization Structure
                                  Budget & Planning
                                                        Contact Us
                                                        Visit
                                                        Careers
                                Student programsWork with NIST
                                                        History
                                NIST Digital Archives
                                  NIST Museum
                                  NIST and the Nobel
                                                        Educational Resources
 
 Information Technology Laboratory /                  Software and Systems Division
      Software Quality Group
    
      
  Computer Forensics Tool Testing Program (CFTT)
                            Expand or Collapse
          CFTT General Information
                                              Expand or Collapse
                Methodology Overview
                                  Presentations
                                  Contact Information
                      CFTT Technical Information
                                              Expand or Collapse
                Cloud Data Extraction (CDX)
                                  Deleted File Recovery
                                  Disk Imaging
                                  Forensic File Carving
                                  Forensic Media Preparation
                                  Forensic String Search
                                  Hardware Write Block
                                                                Expand or Collapse
                      Write-Protected Drives
                                  Mobile Devices
                                                                Expand or Collapse
                      Archived Mobile Specs and Test Plans
                                  MS Windows Registry Tools
                                  Software Write Block
                                  SQLite
                                  Archived Documents
                                  CFTT Raw Test Files
                      Federated Testing Project
                      CFReDS
                      Computer Forensics Tool Catalog
                      Software & Algorithms Catalog
                      Digital Evidence Preservation:  Considerations for Evidence Handlers
                      Useful LinksMethodology Overview

Share
  Facebook
                      Linkedin
                      Twitter
                      Email

The testing methodology developed by NIST is functionality driven. The activities of forensic investigations are separated into discrete functions or categories, such as hard disk write protection, disk imaging, string searching, etc. A test methodology is then developed for each category. The current list of functionalities is available from the links provided in the left column.

The CFTT testing process is directed by a steering committee composed of representatives of the law enforcement community. Currently the steering committee selects tool categories for investigation and tools within a category for actual testing by CFTT staff. A vendor may request testing of a tool, however the steering committee makes the decision about which tools to test.

1.  Specification development process

After a tool category and at least one tool is selected by the steering committee the development process is as follows:

NIST and law enforcement staff develops a requirements, assertions and test cases document (called the tool category specification).
	The tool category specification is posted to the web for peer review by members of the computer forensics community and for public comment by other interested parties.
	Relevant comments and feedback are incorporated into the specification.
	A test environment is designed for the tool category.2.  Tool test process

After a category specification has been developed and a tool selected, the test process is as follows:

NIST acquires the tool to be tested.
	NIST reviews the tool documentation.
	NIST selects relevant test cases depending on features supported by the tool.
	NIST develops test strategy.
	NIST executes tests.
	NIST produces test report.
	Steering Committee reviews test report.
	Vendor reviews test report.
	NIST posts support software to web.
	DHS [DHS] posts test report to web.
  Forensic Science, Digital evidence, Software research and Software testing

    
    Created May 8, 2017, Updated February 22, 2018 ‹ CFTT General Information
              Presentations ›
 HEADQUARTERS
            100 Bureau Drive
              Gaithersburg, MD 20899301-975-2000
            Webmaster | Contact Us | Our Other Offices
        Twitter
            
Facebook
            
LinkedIn
            
Instagram
            
YouTube
            
Giphy
            
RSS Feed
            
Mailing List
                              How are we doing? Feedback

  
  Site Privacy
                      Accessibility
                      Privacy Program
                      Copyrights
                      Vulnerability Disclosure
                      No Fear Act Policy
                      FOIA
                      Environmental Policy
                      Scientific Integrity
                      Information Quality Standards
                      Commerce.gov
                      Science.gov
                      USA.gov
                      Vote.gov