nps-2009-domexusers – The full system, distributed as an encrypted disk image.Two versions of this disk image will be provided: nps-2009-domexusers — This is a disk image of a Windows XP SP3 system that has two users, domexuser1 and domexuser2, who communicate with a third user (domexuser3) via IM and email.nps-2009-ubnist1 — The FAT32 file system from which the nps-2009-capser-rw disk image was extracted.nps-2009-ntfs1 — A test image of an NTFS file system including unfragmented and highly fragmented files stored in raw, compressed, and encrypted directories.nps-2009-hfsjtest1 — A test image of a journaled HFS system in which the data from a previous version of a file can only be recovered from the HFS journal.The operating system was used to browse several US Government websites. nps-2009-casper-rw — An ext3 file system from a bootable USB token that had an installation of Ubuntu 8.10.
nps-2009-canon2 — A set of images taken on with a Canon digital camera that can be used to test basic file recovery, fragmented file recovery, and file carving.Currently the following images in the NPS corpus have been released: These copyrights, where known, are noted in the files themselves. The NPS-created data in these images is public domain and free of any copyright restriction the images may contain some copyrighted data that was made freely available by the copyright holder. These images are free of non-public Personally Identifiable Information (PII) and are approved for release to the general public. NPS Test Disk Images are a set of disk images that have been created for testing computer forensic tools. Please let us know if you feel differently or if you have an alternative strategy for distributing these important research materials. We believe that distributing disk images with broken executables for research and educational purposes is permissible under fair use because doing so does not damage the value of the Microsoft copyrighted information that the disk images contain.  US Copyright Law has a four-part test that determines whether or not the distribution of copyrighted material is permissible under “fair use.” To this end, we have developed a program that breaks Microsoft executables in a way that cannot be reversed. Finally, we have real disk images containing real data from real people IRB approval is required to work with those disks.Ī word about copyright: Some of the disk corpora contains information that is covered by copyright under US Law—specifically copies of the Microsoft Windows operating system. We also have detailed scenarios that contain multiple disk images. The easiest disk images to work with are the NPS Test Disk Images. We have many sources of disk images available for use in education and research.
0 kommentar(er)
