Enrollment Deadline: 1 November 2025

Participants will download a forensic hard drive image and use their own software and methods to examine the evidence and conduct an investigation based on a scripted scenario. Examples of the types of topics covered in these tests include ensuring the integrity of the data and providing details about images, settings, native and third-party applications, communications, and browser history.

Sample Description: A digitally downloadable file that includes a forensic image of a hard drive with a Windows operating system. The image is the same as the one used in the first half of Test 5562, and reporting aspects are combined.

Digital test materials are made available in April.

Additional Information: Digitally downloadable test materials, as well as response forms for all test formats, are only available on www.cts-portal.com. The information necessary to access the test materials will be provided via email to the primary contact on file on the day of the test release.

This test is included on CTS' Scope of Accreditation to ISO/IEC 17043.