FTK Imager
FTK Imager
- FTK Imager is a Windows-based utility that allows a forensic examiner to create forensic images and conduct previews. It's pretty powerful, and FREE. It easily fits on a USB drive, so add it to your own forensic toolbox!
- Accessdata requires some personal information to download the product, but still, it's free! You can use your DSC email to sign up, then download.
Lecture Overview:
- Brief overview of FTK Imager such as adding a drive, creating a hash of a drive, and creating a disk image.:
- Open FTK Imager - (2:00)
- Add Drive - (3:14)
- Other Modes - (10:05)
- Create a hash of a drive - (11:40)
- Create a disk image - (13:10)
- Add Image - (18:17)
Video lecture:
- (Right click this link and use "Save As...") FTK imager
Resources