Product Type

Why You Want It

Quickly assess electronic evidence by obtaining forensic images of computer data, without making changes to the original evidence, all with FTK® Imager!

Are you interested in this product?

1300 55 33 24

contact@cdfs.com.au

Quote Request

FTK® Imager

Data Preview & Imaging

FTK® Imager is a data preview and imaging tool that lets you quickly assess electronic evidence to determine if further analysis with a forensic tool such as Forensic Toolkit (FTK®) is warranted. Create forensic images of local hard drives, CDs and DVDs, thumb drives or other USB devices, entire folders, or individual files from various places within the media.

 

Perfect Copies & Forensic Images

FTK® Imager can create perfect copies, or forensic images of computer data without making changes to the original evidence. The forensic image is identical in every way to the original, including file slack and unallocated space or drive free space. This allows you to store the original media away, safe from harm while the investigation proceeds using the image.

 

Hash Reports

Generate hash reports for regular files and disk images to use as a benchmark to prove the integrity of your case evidence. When a full drive is imaged, a hash generated by FTK® Imager can be used to verify that the image hash and the drive hash match after the image is created, and that the image has remained unchanged since acquisition.

 

Image Mounting

Mount an image for a read-only view that leverages Windows® Internet Explorer® to see the content of the image exactly as the user saw it on the original drive. See and recover files that have been deleted from the Recycle Bin, but have not yet been overwritten on the drive.

 

Capture & View APFS Images

Capture and view APFS images from Mac® hard drives, as well as from Windows hard drives. With FTK® Imager you only need one tool for all operating systems.