Product Type

FTK® Connect

Automate Forensic Workflows with FTK Connect


Quickly and easily automate the power and speed of Exterro’s industry-leading FTK solutions to eliminate wasted time while performing forensic investigations and incident response workflows.


Create powerful time-and money-saving automations without complicated scripting.


FTK Connect enables corporations and law enforcement agencies to easily automate and accelerate key processes and tasks within DFIR investigations. With its dramatically simplified drag and drop interface, FTK Connect empowers users of all skill levels to save time by simplifying their workflows.

Clear Backlogs


FTK Connect automations get evidence into the hands of forensic examiners faster, so they can close more cases and reduce case backlogs.


Preserve Evidence


Integrate with intrusion detection software to automate the immediate collection of remote endpoint evidence from the first moments a cybersecurity incident is detected.


Be Instantly Productive


Built for non-programmers, FTK Connect allows users to easily create automations for any case type with a familiar drag-and-drop interface – no API or Python scripting language needed!


Eliminate manual tasks with forensic workflow automation.


Let FTK Connect handle the mundane tasks, saving investigators’ time for what they do best: forensic analysis and review.  Automate tasks like case creation and evidence processing, as well as next steps like searching and labeling results, exporting data, and more – all without any user interaction.


For full details on compatibility, visit our FAQ section.


Unite FTK solutions with SIEM and SOAR platforms with automated evidence collection.


Orchestrate your incident response workflow by integrating with your cybersecurity tools. Instantly collect and preserve electronic evidence upon detection of an intrusion. FTK Connect can automate collection from remote endpoints based on triggers from solutions like Palo Alto Networks Cortex XSOAR.


Process evidence files instantly with watch folder automation.


Eliminate time spent waiting for jobs to be completed and get cases to examiners in half the time by using FTK Connect to automate case creation and evidence processing.  Law enforcement agencies can configure FTK Connect to watch file directories and automatically process any forensic image placed there, then search the case for preconfigured search terms, apply labels or bookmarks, and export the resulting files.