Date Added: Jul 2012
Digital forensics tools frequently use to calculate the hash value of digital evidence drive. MD5 and SHA hash function is used in digital forensic tools to calculate and verify that a data set has not been altered, due to the application of various evidence collection and analysis tools and procedures. Additionally, due to the impact on the personal life of the subject of an investigation, verification of the correct operation of tools and procedures is critical. This paper discusses the significance of hash value in digital forensic for the digital evidence. The research conducts six possible different cases as an experiment to generate and verify the hash value of test drive using forensic tool to demonstrate the importance of hash value in digital forensic.