Difference between revisions of "FTK Imager"

From Forensics Wiki
Jump to: navigation, search
m (Reverted edit of Porker, changed back to last version by Ocarroll)
(Infobox and categories. Removed copy+pasted text.)
Line 1: Line 1:
−
FTK Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with AccessData® Forensic Toolkit® (FTK™) is warranted. FTK Imager can also create perfect copies (forensic images) of computer data without making changes to the original evidence.
+
{{Infobox_Software |
−
 
+
  name = FTK Imager |
−
With FTK Imager, you can:
+
  maintainer = [[AccessData]] |
−
 
+
   os = {{Windows}} |
−
·   Preview files and folders on local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
+
   genre = {{Disk imaging}} |
−
 
+
   license = {{Commercial}} |
−
·   Create forensic images of local hard drives, floppy diskettes, Zip disks, CDs, and DVDs.
+
   website = [http://www.accessdata.com/products/imager/ accessdata.com/products/imager/] |
−
 
+
}}
−
·   Preview the contents of forensic images stored on the local machine or on a network drive.
+
−
 
+
−
·   Export files and folders.
+
−
 
+
−
·  Generate hash reports for regular files and disk images (including files inside disk images).
+
  
 +
The '''Forensic Toolkit Imager''' ('''FTK Imager''') is a commercial forensic [[imaging]] software package distributed by [[AccessData]].
 
   
 
   
 +
== Notes ==
  
−
IMPORTANT: When using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.
+
* '''Important''': when using FTK Imager to create a forensic image of a suspect's [[hard drive]], make sure you are using a hardware-based [[Write blocker|write blocking device]]. This ensures that your [[operating system]] does not alter the suspect's hard drive when you attach the drive to your computer.

Revision as of 11:17, 6 May 2006

FTK Imager
Maintainer: AccessData
OS: Windows
Genre: Disk imaging
License: Commercial
Website: accessdata.com/products/imager/

The Forensic Toolkit Imager (FTK Imager) is a commercial forensic imaging software package distributed by AccessData.

Notes

  • Important: when using FTK Imager to create a forensic image of a suspect's hard drive, make sure you are using a hardware-based write blocking device. This ensures that your operating system does not alter the suspect's hard drive when you attach the drive to your computer.
Retrieved from "http://www.forensicswiki.org/w/index.php?title=FTK_Imager&oldid=3187"
Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox