Forensic Toolkit

Forensic Toolkit
Developer(s)	Exterro
Stable release	7.6
Operating system	Windows
Available in	English
Type	Digital forensics
Website	www.exterro.com/forensic-toolkit

Forensic Toolkit, or FTK, is a computer forensics software originally developed by AccessData, an Exterro company. It scans a hard drive looking for various information.^[1] It can, for example, potentially locate deleted emails^[2] and scan a disk for text strings to use them as a password dictionary to crack encryption.^[3]

FTK is also associated with a standalone disk imaging program called FTK Imager. This tool saves an image of a hard disk in one file or in segments that may be later on reconstructed. It calculates MD5 and SHA1 hash values and can verify the integrity of the data imaged is consistent with the created forensic image. The forensic image can be saved in several formats, including DD/raw, E01, and AD1.^[4]

References

↑ Schneier, Bruce (2007-11-01). "Secure Passwords Keep You Safer". Wired. p. 3. http://archive.wired.com/politics/security/commentary/securitymatters/2007/01/72458?currentPage=all. Retrieved 2009-01-12.
↑ Dixon, Phillip D. (December 2005). "An overview of computer forensics". IEEE Potentials (IEEE) 24 (5): 8. doi:10.1109/mp.2005.1594001. ISSN 0278-6648. http://www.phillipdixon.net/PDForensics.pdf. Retrieved 2009-01-12.
↑ Casey, Eoghan (Fall 2002). "Practical Approaches to Recovering Encrypted Digital Evidence". International Journal of Digital Evidence (Utica, New York: Economic Crime Institute, Utica College) 1 (3): 12. ISSN 1938-0917. http://www.digital4nzics.com/Student%20Library/Practical%20Approaches%20to%20Recovering%20Encrypted%20Digital%20Evidence.pdf. Retrieved 2009-01-12.
↑ "FTK Imager User Guide v4.3.0". January 28, 2020. https://ad-pdf.s3.amazonaws.com/Imager/4_3_0/FTKImager_UG.pdf.

External links

AccessData Forensic Toolkit (PDF)

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Forensic Toolkit. Read more

[wired-1] Schneier, Bruce (2007-11-01). "Secure Passwords Keep You Safer". Wired. p. 3. http://archive.wired.com/politics/security/commentary/securitymatters/2007/01/72458?currentPage=all. Retrieved 2009-01-12.

[Dixon-2] Dixon, Phillip D. (December 2005). "An overview of computer forensics". IEEE Potentials (IEEE) 24 (5): 8. doi:10.1109/mp.2005.1594001. ISSN 0278-6648. http://www.phillipdixon.net/PDForensics.pdf. Retrieved 2009-01-12.

[Casey-3] Casey, Eoghan (Fall 2002). "Practical Approaches to Recovering Encrypted Digital Evidence". International Journal of Digital Evidence (Utica, New York: Economic Crime Institute, Utica College) 1 (3): 12. ISSN 1938-0917. http://www.digital4nzics.com/Student%20Library/Practical%20Approaches%20to%20Recovering%20Encrypted%20Digital%20Evidence.pdf. Retrieved 2009-01-12.

[4] "FTK Imager User Guide v4.3.0". January 28, 2020. https://ad-pdf.s3.amazonaws.com/Imager/4_3_0/FTKImager_UG.pdf.

[1]

[2]

[3]

[4]

v t e Digital forensics
Branches	Computer forensics Mobile device forensics Network forensics Database forensics
Hardware	Forensic disk controller
Software	ADF Solutions Digital Evidence Investigator EnCase Foremost FTK Registry Recon PTK Forensics The Sleuth Kit The Coroner's Toolkit COFEE HashKeeper Xplico
Certification	Certified Forensic Computer Examiner (CFCE) Global Information Assurance Certification
Processes	Digital forensic process Data acquisition Digital evidence eDiscovery Anti-computer forensics
Organisations	National Software Reference Library American Society of Digital Forensics & eDiscovery Department of Defense Cyber Crime Center National Hi-Tech Crime Unit (NHTCU) Australian High Tech Crime Centre (AHTCC)
People	Mary Aiken Annie Antón Rebecca Bace Josh Brunty Eoghan Casey Hany Farid Simson Garfinkel Clifford Stoll Erik Laykin Robert Zeidman
Glossary of digital forensics terms

Forensic Toolkit

Topic: Software

References

External links