Forensic Analyses Certification Tool

[rsvihalek]

We would like to know users opinions about the product we are currently thinking about to offer to forensics. I'll start the product description from end: the output of the product should be a report with all activities the operator performed to dump the data. Resulting report should be sign using the RSA including the dumped data with possibility to burn the DVD.

The goal of the product usage should be the possibility to present to anybody that on computer used for data dumping there was no activities and no software running which can result in report data being modified or
incorrect in some way.

Our vision of work steps is the following:
forensic would like to start dump of data. He/she will right-click the tray icon and selects the appropriate command
dialog will appear with possibility to enter information aout the case, dumped data, examier, etc.
product will start activities monitoring
forensic will dump all the needed data and do all the needed action
when he/she is done right-click the tray icon and selects the command to stop monitoring and create activities report, specify private key, etc.
product will store activities, sign them and signs resulting data of the dump

I would like to know your opinion, comments and if such a product is interesting to you as the investigators and forensic detectives