AccessData Forensic Toolkit (FTK), from Exterro

AccessData Forensic Toolkit (FTK) is a digital forensics software solution designed to assist investigators in finding evidence efficiently. According to the vendor, FTK offers advanced search and analysis capabilities to quickly identify relevant data. It is suitable for organizations of various sizes, including small businesses and large enterprises. FTK is commonly used by law enforcement agencies, legal professionals, cybersecurity experts, IT professionals, and government agencies.

Key Features

Zero in on relevant evidence quickly: According to the vendor, FTK provides powerful search capabilities to help investigators find evidence efficiently.

Handle various data types in a collaborative environment: FTK Lab offers a collaborative workspace for forensic investigations, allowing multiple users to work on different cases simultaneously. It supports the handling of different data types, enabling comprehensive analysis and investigation.

Preview live data at the endpoint and collect off-network quickly: FTK Enterprise allows for remote preview and collection of live data from endpoints, ensuring timely access to critical evidence. The vendor claims it also offers fast and efficient off-network data collection.

Innovative forensic and review workflows in one collaborative tool: FTK Central combines forensic and review workflows into a single web-based tool, streamlining the investigation process. According to the vendor, it provides a collaborative environment for forensic teams to work together efficiently.

Kick off post-breach investigations immediately: FTK Connect enables rapid response to post-breach investigations, allowing investigators to gather evidence immediately. According to the vendor, it provides tools and capabilities to analyze and investigate security breaches effectively.

Create perfect forensic images of computer data: FTK Imager allows for the creation of forensic images of computer data without making changes to the original evidence. It supports the imaging of various storage media, including hard drives, SSDs, and removable media.

Manage legal holds and ensure compliance: Legal Hold automates and orchestrates workflows for managing legal holds, ensuring compliance with preservation obligations. According to the vendor, it helps organizations ensure employees receive relevant policies.

Preserve data in its original location: In-Place Preservation allows for the preservation of data in its original location, minimizing disruption and maintaining data integrity. It enables data collection and processing without requiring it to be moved or copied.

Conduct comprehensive interviews with custodians: Comprehensive Interview streamlines the interview process with automated workflows and templates, allowing investigators to gather information and identify potential sources of relevant data.

Utilize advanced analytics and machine learning: Smart ECA utilizes advanced analytics and machine learning to uncover patterns, relationships, and anomalies in data. According to the vendor, it helps identify key documents and prioritize review efforts based on relevance and potential impact.