Never performed forensics on voting machines in particular, however, they are fairly basic in what they do and store (well, should be).
Realistically, it should take competent DFIR teams 24-48 hours to get the bulk of the work done. If they're imaging the disk drives and memory, the work can be distributed.
Given this is so important, they'll be working non stop I imagine, if they are proper security response teams interested in doing a proper job.
How long does a forensic audit take?
Who cares. When you hold all the cards you really don’t care about the timeline.
Never performed forensics on voting machines in particular, however, they are fairly basic in what they do and store (well, should be).
Realistically, it should take competent DFIR teams 24-48 hours to get the bulk of the work done. If they're imaging the disk drives and memory, the work can be distributed.
Given this is so important, they'll be working non stop I imagine, if they are proper security response teams interested in doing a proper job.