2.7 - Exterro FTK Imager #
2.7.1 Lab Objectives #
By the end of this lab you should be able to:
- Install FTK Imager.
Download Link: https://go.exterro.com/l/43312/2022-01-21/f6h1s3
- NOTE: You will need to fill out the form in order to download the software.
FTK® Imager is a data preview and imaging tool used to acquire data (evidence) in a forensically sound manner by creating copies of data without making changes to the original evidence. With FTK Imager you can:
- Create forensic images of local hard drives, CDs and DVDs, thumb drives or other USB devices, entire folders, or individual files from various places within the media.
- Preview the contents of forensic images stored on the local machine or on a network drive.
- Create hashes of files to check the integrity of the data by using either of the two hash functions available in FTK Imager: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA-1).