|
|
FTK Forensic Toolkit:
Forensic Toolkit® (FTK®) is recognized around the world as the standard in computer forensic investigation technology. This court-validated platform delivers cutting edge analysis, decryption and password cracking all within an intuitive, customizable and user-friendly interface. In addition, with FTK, you have the option of utilizing a back-end database to handle large data sets. Or you can work without one if application simplicity is your goal. Either way you will get the benefit of best-of-breed technologies that can be expanded to meet your ever-changing needs. Known for its intuitive functionality, email analysis, customizable data views and stability, FTK is the smart choice for stand-alone forensic investigations.

Product Features
|
An Integrated Solution
- Create images, analyze the registry, conduct an investigation, decrypt files, crack passwords, identify stegonograpy, and build a report all with a single solution.
- Recover passwords from over 80 applications; harness idle CPUs across the network to decrypt files and perform robust dictionary attacks.
- KFF hash library with 45 million hashes.
|
|
Embedded Oracle Database & Powerful Searching
- Supports the largest, most complex datasets.
- Never lose case data due to a crash.
- Ability to back up and archive cases.
- Powerful index search engine and a proper full-feature regular expression engine for binary searches.
|
|
Powerful Processing and Speed
- True multi-processor and multi-threading support that takes advantage of hardware advancements.
- Automated recovery during pre-processing ensures the job gets done.
- Wizard-driven processing ensures no data is missed.
- Pre- and post-processing refinement allows you to control how images are processed, greatly reducing processing time.
- Advanced data carving engine allows you to carve allocated and unallocated data and specify criteria, such as file size, data type and pixel size to reduce the amount of irrelevant data carved while increasing overall thoroughness.
- Broad file system, compound file and email support.
- Ability to hash and filter data using MD5, SHA1, SHA256 and Fuzzy
|
|
Intuitive Interface and Rich Functionality
- Easy-to-understand and easy-to-use GUI with pre-defined and customizable data views, advanced filtering, dockable windows and automated data categorization.
- Multi-data views allowing users to analyze a given file in a number of different ways, such as native, hex, text and filtered.
- Full Unicode and Code Page support lets you search for, display and report on data in its native format, in any language Unicode supports.
- Supports popular encryption technologies, such as Credant, SafeBoot and Utimaco.
- Rich and powerful reporting engine allows you to create detailed reports and output them into native format, HTML, PDF, XML, RTF, and more - with links back to the original evidence.
- Easy export functionality to extract relevant artifacts without compromise - maintaining source, metadata and path.
FTK 2.0 Webinar
What's New in FTK® 2.1?
Download FTK Broshure
FTK 2.1 Release Update
|
|