Difference between revisions of "Forensic Toolkit"

From ForensicsWiki
Jump to: navigation, search
m
(Infobox and categories.)
Line 1: Line 1:
 +
{{Infobox_Software |
 +
  name = Forensic Toolkit (FTK) |
 +
  maintainer = [[AccessData]] |
 +
  os = {{Windows}} |
 +
  genre = {{Analysis}} |
 +
  license = {{Commercial}} |
 +
  website = [http://www.accessdata.com/products/ftk/ accessdata.com/products/ftk/] |
 +
}}
 +
 
The '''Forensic Toolkit''' ('''FTK''') is a commercial forensic software package distributed by [[AccessData]].
 
The '''Forensic Toolkit''' ('''FTK''') is a commercial forensic software package distributed by [[AccessData]].
  
Line 47: Line 56:
  
 
=External Links=
 
=External Links=
 
* [http://www.accessdata.com/ Official website]
 
  
 
==External Reviews==
 
==External Reviews==

Revision as of 11:08, 6 May 2006

Forensic Toolkit (FTK)
Maintainer: AccessData
OS: Windows
Genre: Analysis
License: Commercial
Website: accessdata.com/products/ftk/

The Forensic Toolkit (FTK) is a commercial forensic software package distributed by AccessData.

Features

File Systems Understood

  • Outlook (PST)
  • AOL
  • Web based email like Yahoo and Hotmail
  • Eudora
  • MSN Mail
  • NTFS
  • FAT
  • Ext2, Ext3
  • Compressed files with WinZip, GZip, Tar and others

File Search Facilities

  • Lists allocated and unallocated files.
  • Sorts files by type.
  • Searches for keywords and regular expressions.

Historical Reconstruction

Can it build timelines and search by creation date?

Searching Abilities

  • Can use basic keyword searching.
  • Offers full-text indexing powered by dtSearch.
  • Search can be focused on "Internet text".

Hash Databases

Evidence Collection Features

Can it sign files? Does it keep an audit log?

History

License Notes

Is it commercial or open source? Are there other licensing options?

External Links

External Reviews