LOP Enrollment Deadline: 1 February 2025

This test is still open for enrollment via credit card only. Please select credit card as the payment method during the checkout process if your order includes any Late Order Purchase (LOP) tests.

Participants will download a forensic hard drive image and use their own software and methods to examine the evidence and conduct an investigation based on a scripted scenario. Examples of the types of topics covered in these tests include ensuring the integrity of the data and providing details about images, settings, external media, native and third-party applications, communications, and browser history. Participants will also use their own software and methods to forensically acquire evidence from the removable storage device, produce a forensic image, and answer additional test questions.

Sample Description: A digitally downloadable file that includes a forensic image of a hard drive with a Windows operating system, and a physically shipped removable storage device. The digitally downloadable image used in the first half of the test is the same as the one used in Test 5561, and reporting aspects for that section of the test are combined.

Samples ship and digital test materials are made available in April.

Additional Information: Samples for digital testing, as well as response forms for all test formats, are only available on www.cts-portal.com. The information necessary to access the test materials will be provided via email to the primary contact on file on the day of the test release.

This test is included on CTS' Scope of Accreditation to ISO/IEC 17043.