FTK Imager - Revision history

Joachim Metz at 18:59, 17 December 2010

2010-12-17T18:59:50Z

Simsong at 01:16, 21 April 2009

2009-04-21T01:16:20Z

.FUF: link

2009-03-30T18:28:01Z

link

Jessek at 04:31, 27 February 2007

2007-02-27T04:31:55Z

Uwe Hermann: Infobox and categories. Removed copy+pasted text.

2006-05-06T16:17:00Z

Infobox and categories. Removed copy+pasted text.

Uwe Hermann: Reverted edit of Porker, changed back to last version by Ocarroll

2006-04-16T16:55:05Z

Reverted edit of Porker, changed back to last version by Ocarroll

Porker at 13:42, 16 April 2006

2006-04-16T13:42:34Z

Ocarroll: FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis is warranted.

2006-04-15T16:27:46Z

FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis is warranted.

New page

FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with AccessData® Forensic Toolkit® (FTK™) is warranted. FTK Imager can also create perfect copies (forensic images) of computer data without making changes to the original evidence.

With FTK Imager, you can:

· Preview files and folders on local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.

· Create forensic images of local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.

· Preview the contents of forensic images stored on the local machine or on a network drive.

· Export files and folders.

· Generate hash reports for regular files and disk images (including files inside disk images).

IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.

@@ Line 10: / Line 10: @@
 The '''Forensic Toolkit Imager''' ('''FTK Imager''') is a commercial forensic [[imaging]] software package distributed by [[AccessData]].
-FTK Imager supports storage of disk images in EnCase's or [[SMART]]'s file format, as well as in raw ([[dd]]) format.  With Isobuster technology built in, [[FTK Imager]] Images CD's to a ISO/CUE file combination.  This also includes multi and open session CDs.
+FTK Imager supports storage of disk images in EnCase's or [[SMART]]'s file format, as well as in raw ([[dd]]) format.  With Isobuster technology built in, [[FTK Imager]] Images CD's to a ISO/[[CUE_Sheet_format|CUE]] file combination.  This also includes multi and open session CDs.
 == Notes ==
 * '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write Blockers|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.

@@ Line 10: / Line 10: @@
 The '''Forensic Toolkit Imager''' ('''FTK Imager''') is a commercial forensic [[imaging]] software package distributed by [[AccessData]].
 == Notes ==
 * '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write Blockers|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.

@@ Line 5: / Line 5: @@
    genre = {{Disk imaging}} |
    license = {{Commercial}} |
-   website = [http://www.accessdata.com/products/imager/ accessdata.com/products/imager/] |
+   website = [http://www.accessdata.com/downloads.html http://www.accessdata.com/downloads.html] |
 }}

← Older revision		Revision as of 04:31, 27 February 2007
Line 12:		Line 12:
	== Notes ==		== Notes ==

−	* '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write ~~blocker~~\|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.	+	* '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write Blockers\|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.

@@ Line 1: / Line 1: @@
-FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with AccessData® Forensic Toolkit® (FTK™) is warranted. FTK Imager can also create perfect copies (forensic images) of computer data without making changes to the original evidence.
+{{Infobox_Software |
+  name = FTK Imager |
-With FTK Imager, you can:
+  maintainer = [[AccessData]] |
+   os = {{Windows}} |
-·   Preview files and folders on local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
+   genre = {{Disk imaging}} |
+   license = {{Commercial}} |
-·   Create forensic images of local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
+   website = [http://www.accessdata.com/products/imager/ accessdata.com/products/imager/] |
+}}
-·   Preview the contents of forensic images stored on the local machine or on a network drive.
-−
-·   Export files and folders.
-−
-·   Generate hash reports for regular files and disk images (including files inside disk images).
-IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.
+* '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write blocker|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.

← Older revision		Revision as of 16:55, 16 April 2006
Line 1:		Line 1:
		+	FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with AccessData® Forensic Toolkit® (FTK™) is warranted. FTK Imager can also create perfect copies (forensic images) of computer data without making changes to the original evidence.

		+	With FTK Imager, you can:
		+
		+	· Preview files and folders on local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
		+
		+	· Create forensic images of local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
		+
		+	· Preview the contents of forensic images stored on the local machine or on a network drive.
		+
		+	· Export files and folders.
		+
		+	· Generate hash reports for regular files and disk images (including files inside disk images).
		+
		+

	IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.		IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.

← Older revision		Revision as of 13:42, 16 April 2006
Line 1:		Line 1:
−	FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with AccessData® Forensic Toolkit® (FTK™) is warranted. FTK Imager can also create perfect copies (forensic images) of computer data without making changes to the original evidence.

−	~~With FTK Imager, you can:~~
−
−	~~· Preview files and folders on local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.~~
−
−	~~· Create forensic images of local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.~~
−
−	~~· Preview the contents of forensic images stored on the local machine or on a network drive.~~
−
−	~~· Export files and folders.~~
−
−	~~· Generate hash reports for regular files and disk images (including files inside disk images).~~
−
−

	IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.		IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.