Compare information from report with good information by running regedit or another known good utility. Launch the application file. “rr” Select the registry hive. “System” Select the report file and save it as SYSTEM Report.txt. Select the plugin. “system-all” Click It”. “Rip Navigate to the Report.txt” report file and review the contents. “SYSTEM Compare report with known good information. Launch the application file. “rr” Select the registry hive. “Software” Select the report file and save it as SOFTWARE Report.txt. Select the plugin. “software-all” Click It”. “Rip Navigate to the Report.txt” report file and review the contents. “SOFTWARE Compare report with known good information. Launch the application file. “rr” Select the registry hive for a user with known activity. “NTUSER.dat” Select the report file and save it as NTUSER Report.txt. Select the plugin. “ntuser-all” Click It”. “Rip Navigate to the Report.txt” report file and review the contents. “NTUSER Compare report with known good information. 9. Test Results The actual results were the expected results. 10. Observations / Concerns None. 11. Limitations None. 12. Recommendations This software should be part of the [Agency Name]’s CIRT forensic tool set.
Compare information from report with good information by running regedit or another known good utility. Launch the “rr” application file. Select the “System” registry hive. Select the report file and save it as SYSTEM Report.txt. Select the “system-all” plugin. Click “Rip It”. Navigate to the “SYSTEM Report.txt” report file and review the contents. Compare report with known good information. Launch the “rr” application file. Select the “Software” registry hive. Select the report file and save it as SOFTWARE Report.txt. Select the “software-all” plugin. Click “Rip It”. Navigate to the “SOFTWARE Report.txt” report file and review the contents. Compare report with known good information. Launch the “rr” application file. Select the “NTUSER.dat” registry hive for a user with known activity. Select the report file and save it as NTUSER Report.txt. Select the “ntuser-all” plugin. Click “Rip It”. Navigate to the “NTUSER Report.txt” report file and review the contents. Compare report with known good information. 9. Test Results The actual results were the expected results. 10. Observations / Concerns None. 11. Limitations None. 12. Recommendations This software should be part of the [Agency Name]’s CIRT forensic tool set.
CIRT-Validation-Manual-1.docx