Forensics steady state

Travis Scarboro, University of Rhode Island


After finishing the process of investigating digital evidence on a forensic workstation, it is important for law enforcement to use a forensically sound machine when starting a new investigation. To prevent cross-contamination of remnants between cases, most law enforcement agencies seek to have a controlled operating environment that can be reset to a sterile state which ensures that all remnants of previous cases are not present. The discontinuation of Windows SteadyState™ has left forensic investigators without a viable automated solution for ensuring a controlled environment that ensures the probative value of digital evidence. This thesis project forensically validates and modifies an existing open-source SteadyState™ solution, Steadier State, which will provide law enforcement officers with a viable substitution to other costly products.

Subject Area

Computer science

Recommended Citation

Travis Scarboro, "Forensics steady state" (2014). Dissertations and Master's Theses (Campus Access). Paper AAI1570854.