Magnet VERIFY

Problem: Copying forensic images (or extractions) from acquisition drives to other media for consolidation is a time-consuming process. This often requires hash verification of each forensic image individually and multiple tools depending on the forensic image format. Solution: A free Windows based GUI tool that will verify multiple forensic images (or extractions) of varying types (E01, DD, AFF4, AD1, L01, ZIP) based on a queue (or concurrent threads where possible). The proposed tool would allow selection of individual forensic images to add to a queue, or the option to scan recursively all folders for the common forensic image types. The latter option would correctly identify the forensic image type, then add them to a queue. The tool would allow selection of MD5, SHA-1, or SHA-256 as appropriate. Once the queue is set, the tool would begin verification of each forensic image. The resulting log file (CSV and XML) would show the forensic image name, path, and verification hashes. – Chad (chad.parks@fda.hhs.gov)