NIST Scientific Foundation Study for Digital Examiners

DIGITAL FORENSICS:NIST Scientific Foundation Study for Digital Examiners

NIST to Digital Forensics Experts: Show Us What You Got

First large-scale “black box” study will test the accuracy of computer and mobile phone forensics.

 “We want to understand the state of the practice. Can experts produce accurate and reliable information when extracting data from a digital device?” —Barbara Guttman, leader of NIST’s digital forensics research program

For the NIST black box study, participants will download simulated evidence from the NIST website in the form of one virtual mobile phone and one virtual computer. Such virtual devices, called “forensic images,” are commonly used in digital forensics, and study participants will be able to connect to them using the same software tools they use when working on real cases.

The forensic images created for this study simulate imagined but realistic scenarios involving a potential homicide and a potential theft of intellectual property. Study participants will download the images, examine them using whatever forensic software tools they choose, and answer a series of questions. For instance:

• What software program was used to discuss a potentially illegal transaction? 
• What was the VIN number of the vehicle that connected to the phone via Bluetooth?  
• What location information can be gleaned from the photo of a black Labrador found on this device?

Welcome to NIST Scientific Foundation Study for Digital Examiners

You have chosen to take the offline simulated case study for the hard drive test.

Your will need to download the material for the offline simulated case study.

These files include the image file download for the hard drive test study, as well as the testing worksheet.

We estimate the test to take approximately 2 hours to complete after downloading the simulated case material.

Complete the case study offline then return your worksheet answers to NIST using the 'Test Survey' link listed below.

Testing Image Download:

Size mobile image, 5.2GB hard drive image 19GB

mobile image: https://s3.amazonaws.com/docs.nsrl.nist.gov/de_blackbox_study/mobile_test/UFED_Samsung_GSM_SM-G920A_Galaxy_S6_2019_08_13_(001).zip

hard drive image: https://s3.amazonaws.com/docs.nsrl.nist.gov/de_blackbox_study/hard_drive_test/HardDrive-002.zip

Image Download File Signatures:

mobile image SHAs =

MD5=c54a9c1659d931b14154c919929005b9 UFED_Samsung_GSM_SM-G920A_Galaxy_S6_2019_08_13_(001).zip

SHA1=43a7a27638020e2593d540186edc0e5f398a608b UFED_Samsung_GSM_SM-G920A_Galaxy_S6_2019_08_13_(001).zip

SHA256=04b2db3258ef30ebb1a3be47b9716455ef4fb1ede677a933470291eca82e9aff UFED_Samsung_GSM_SM-G920A_Galaxy_S6_2019_08_13_(001).zip

hard drive image SHAs

MD5=c1128ffc1c0582234d3a6fbb3a762d11 HardDrive-002.zip

SHA1= 795c2fd3632e5dc76cb4acfc9e42a948f73599a0 HardDrive-002.zip

SHA256= 8501aa9ba74fd4410489c8b2e1b120aa27c1bb8bac4c740f73ba708fff836445 HardDrive-002.zip

Testing Worksheet:

https://s3.amazonaws.com/docs.nsrl.nist.gov/de_blackbox_study/mobile_test/nist_mobile_test_questions.pdf

https://s3.amazonaws.com/docs.nsrl.nist.gov/de_blackbox_study/hard_drive_test/NIST_HardDriveQuestions_V2.pdf

Testing Worksheet File Signatures:

mobile worksheet SHAs

nist_mobile_test_questions.pdf MD5=f821fb48dc5b6a7c8f63cd170bc514fd

nist_mobile_test_questions.pdf SHA1=c908963e6460205decd49be46696fd6f96573d6b

nist_mobile_test_questions.pdf SHA256=c8f5188538fc3187b374a332bb5de21817d3a1cea2f5e440ac9abf1faf5ece3a

hard drive worksheet SHAs

NIST_HD_TestQuestions.pdf MD5=a877e2d29e5e237592468d71c0c93158

NIST_HD_TestQuestions.pdf SHA1=377cd970c6828fa29b96fd0bf42a8019372ad3ab

NIST_HD_TestQuestions.pdf SHA256=662578cb175988cada78f00b6e5b7d53e157d23e362d9bd37fd75352291b4969

Expiration Date: 07/31/2022

NIST Blackbox Study for Digital Examiners

ที่มา:

https://www.nist.gov/news-events/news/2020/06/nist-digital-forensics-experts-show-us-what-you-got

หมายเหตุ:เนื้อหาในเว็บไซต์นี้มีขึ้นเพื่อวัตถุประสงค์ในการให้ข้อมูลและเพื่อการศึกษาเท่านั้น

* หากมีข้อมูลข้อผิดพลาดประการใด ขออภัยมา ณ ที่นี้ด้วย  รบกวนแจ้ง Admin เพื่อแก้ไขต่อไป
ขอบคุณครับ

NIST black box study

#WindowsForensic #ComputerForensics #dfir #forensics #digitalforensics #computerforensic #investigation #cybercrime #fraud #ฝึกทำLab