EFTA00157523.pdf

November 26, 2021 Call with • Tool that use to do imaging incorporate the hashing into it; when finished with imaging, know that the data on the image is identical to the data on the original device • GX 405 and 419 were generated by Access Data AD Lab • Access Data AD Lab: computer forensic program which categorizes and organizes data off of computers, digital media, for review; same tool as Forensic Tool Kit (FTK), but that is limited to one user at a time, whereas AD Lab allows for multiple users at a time • Group in headquarters test and validate tools before CART uses the tools • GX 418, 420, 421,422 were created under user profile named gmax • Computer: any device which has 4 separate characteristics: takes input, produces output, has a processor, and has storage • CART uses various software products to conduct a forensic examination; product used depends on what is being examined 3503-119 Page 1 of 1 SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00002340 EFTA00157523