hemu1438/forensicsgpt-training-data huggingface dataset:
NTFS Undelete Image #1

Tool: 
Version: 

1.  Can you see any of the deleted file names?  Which ones?

2.  Can you recover the res1.dat file?  Does it have the correct MD5?

3.  Can you recover the sing1.dat file?  Does it have the correct MD5?

4.  Can you recover the dir3\sing2.dat file?  Does it have the correct MD5?

5.  Can you recover the mult1.dat file?  Does it have the correct MD5?

6.  Can you recover the mult1.dat:ADS file?  Does it have the correct MD5?

7.  Can you recover the dir1\mult2.dat file?  Does it have the
correct MD5?

8.  Can you recover the frag1.dat file?  Does it have the correct MD5?

9.  Can you recover the frag2.dat file?  Does it have the correct MD5?

10.  Can you recover the dir1\dir2\frag3.dat file?  Does it have the
correct MD5?

11.  Are the dates propely shown to be from Feb 29, 2004?  (testing leap
year support)
FAT Volume Label Test #1

Tool: 
Version: 


1.  Does the analysis tool display the volume label for the image?
If so, what label does it give?


2.  Does the tool has some form of consistency checking feature?
If so, does it identify that the volume labels have clusters allocated
to them or that there are multiple directory entries with the volume
label attribute set?


3.  In the file browsing mode of the tool, is the "LABEL2" entry
shown?  Can you view its contents?  What is its MD5?


4.  In the file browsing mode of the tool, is the "dir1/FILE2.DLL"
entry shown?  Can you view its contents?  What is its MD5?


5.  If a keyword search is conducted for the ASCII string "over
here", is it found?  At what sector/cluster address is it located?  
Does the tool report which file it is allocated to?


6.  Does the tool have a method of identifying all graphic files?
If so, does it find the "dir1/FILE2.DLL" file?
NTFS Autodetect Test #1

Tool: 
Version: 


1.  Import the 10-ntfs-disk.dd image into your analysis tool.  

1a.  Does the tool warn you that multiple file systems exist in the
first partition?  If not, which file system is shown (you can easily
determine this based on the name of the file in the root directory)?


1b.  Does the tool warn you that multiple file systems exist in the
second partition?  If not, which file system is shown?


2.  Import the 10-ntfs-part1.dd image into your analysis tool.  Does
the tool warn you that multiple file systems exist in the partition?
If not, which file system is shown?


3.  Import the 10-ntfs-part2.dd image into your analysis tool.  Does
the tool warn you that multiple file systems exist in the partition?
If not, which file system is shown?


4.  Import the 10-ntfs-part3.dd image into your analysis tool.  Does
the tool warn you that multiple file systems exist in the partition?
If not, which file system is shown?