Forensic Toolkit

Forensic Toolkit
FTK Logo
Developer(s) AccessData
Stable release
6.2 / May 3, 2017 (2017-05-03)
Operating system Windows
Available in English
Type Computer forensics
Website http://accessdata.com/products/computer-forensics/ftk

Forensic Toolkit, or FTK, is a computer forensics software made by AccessData. It scans a hard drive looking for various information.[1] It can, for example, locate deleted emails[2] and scan a disk for text strings to use them as a password dictionary to crack encryption.[3]

The toolkit also includes a standalone disk imaging program called FTK Imager. The FTK Imager is a simple but concise tool. It saves an image of a hard disk in one file or in segments that may be later on reconstructed. It calculates MD5 hash values and confirms the integrity of the data before closing the files. The result is an image file(s) that can be saved in several formats, including DD raw.

References

  1. ↑ Schneier, Bruce (2007-11-01). "Secure Passwords Keep You Safer". Wired. p. 3. Retrieved 2009-01-12.
  2. ↑ Dixon, Phillip D. (December 2005). "An overview of computer forensics" (PDF). IEEE Potentials. IEEE. 24 (5): 8. doi:10.1109/mp.2005.1594001. ISSN 0278-6648. Retrieved 2009-01-12.
  3. ↑ Casey, Eoghan (Fall 2002). "Practical Approaches to Recovering Encrypted Digital Evidence" (PDF). International Journal of Digital Evidence. Utica, New York: Economic Crime Institute, Utica College. 1 (3): 12. ISSN 1938-0917. Retrieved 2009-01-12.

AccessData Forensic Toolkit Version 5.5

This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.