| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| GA/T 827-2009 | English | 199 |
Add to Cart
|
3 days [Need to translate]
|
File identification technical specifications of electronic forensics
| Obsolete |
GA/T 827-2009
|
PDF similar to GA/T 827-2009
Basic data | Standard ID | GA/T 827-2009 (GA/T827-2009) | | Description (Translated English) | File identification technical specifications of electronic forensics | | Sector / Industry | Public Security (Police) Industry Standard (Recommended) | | Classification of Chinese Standard | A92 | | Classification of International Standard | 13.310 | | Word Count Estimation | 4,470 | | Date of Issue | 2009-04-07 | | Date of Implementation | 2009-06-01 | | Quoted Standard | GA/T 825-2009 | | Regulation (derived from) | Ministry of Public Security Material Identification Center News April 15, 2009; industry standard filing notice 2010 No. 2 (No. 122); Ministry of Public Security Bulletin (2015.04.19) | | Issuing agency(ies) | Ministry of Public Security | | Summary | This standard specifies the method for the conformance test of electronic document examination technical documents. This standard applies to electronic evidence testing in forensic science. | GA/T 827-2009: File identification technical specifications of electronic forensics---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
File identification technical specifications of electronic forensics
ICS 13.310
A92
People's Republic of China Public Security Industry Standards
Electronic evidence file consistency check technical specifications
Posted 2009-04-07
2009-06-01 implementation
People's Republic of China Ministry of Public Security
Foreword
This standard by the National Standardization Technical Committee Criminal technology of electronic evidence Technical Committee (SAC/TC179/SC7) proposed
And centralized.
This standard was drafted. Ministry of Public Security Evidence Identification Center.
The main drafters of this standard. Tracing Back Club, Xinggui Dong, Chu Chuan red, Zhangguo Chen.
Electronic evidence file consistency check technical specifications
1 Scope
This standard specifies the method of electronic evidence technology file consistency test.
This standard applies to forensic science in the field of electronic evidence.
2 Normative references
The following documents contain provisions which, through reference in this standard and become the standard terms. For dated references, subsequent
Amendments (not including errata content) or revisions do not apply to this standard, however, encourage the parties to the agreement are based on research
Whether the latest versions of these documents. For undated reference documents, the latest versions apply to this standard.
GA/T 825-2009 electronic evidence data relevant test specifications
3 Terms and Definitions
Terms and definitions GA/T 825-2009 established in applicable to this standard.
4 Equipment
4.1 Hardware
Storage media, the preservation of backup devices, with electronic evidence examination workstation read-only interface.
4.2 Software
4.2.1 Operating system. Windows, Unix, Linux, MacOS, etc.
4.2.2 software tools. EnCase, ForensicToolKit, X-waysForensics, Macforensicslab like.
5 steps
5.1 samples and sample number
Submission of samples and the samples were unique number.
5.2 samples and sample pictures
Submission of samples and the sample was photographed.
5.3 Inspection
5.3.1 Start antivirus software on electronic evidence workstation system antivirus.
5.3.2 The samples data files and sample data files to burn a backup CD.
5.3.3 Copy the preservation of samples of data files and sample data files to electronic evidence workstations.
5.3.4 software tool calculates the hash value of the seized material data files and sample data files. Calculation methods shall be in accordance with the respective hash value
Software tools the operating instructions.
5.3.5 hashes compare samples data files and sample data files. If the two hash values are the same, it can be judged two data files
Same; if the two hash values are different, based on data from two different files.
6 inspection conclusion representation
Following on the number "n" number of samples and the use of software tools for the rr "m" technical inspection of samples, two data files
Data of the same (or different).
Note. n is the number of the representative samples; m representative sample number; rr represents the software tool name and version number.
|