Host your FTK database in AWS to upload, process and review for unmatched speed and scalability.

Powerful and proven, FTK processes and indexes data upfront, eliminating wasted time waiting for searches to execute.

No matter how many different data sources youre dealing with or the amount of data you have to cull through, FTK gets you there quicker and better than anything else.

While other forensics tools waste the potential of modern hardware solutions, FTK uses 100 percent of its hardware resources, helping investigators find relevant evidence faster.

Whether youre investigating or performing document review, you have a shared index file, eliminating the need to recreate or duplicate files.

All data is stored securely and centrally, allowing your teams to use the same data.

This reduces the cost and complexity of creating multiple data sets.

Decrypt files, crack passwords, and build a report all with a single solution.

FTK components are compartmentalized allowing the processing workers to continue processing data without interruption.

Also label, bookmark and export individual objects per category, allowing for easy searching, filtering and reporting.

Supports decryption of File Vault 2 from the APFS file system.

QView integration introduces a simple, intuitive and customizable review interface.

Utilize multi-case functionality such as tagging, searching, labeling and bookmarking across multiple cases.

Enjoy easy mobile chat application and multimedia review, along with similar face and image detection all backed by a unified database.

And, a panels-driven interface means that you can customize the view to your liking.

Reviewers will also appreciate the ability to view the data in a near-native format.

Similar face and object detection allow investigators to quickly locate all images of a person or object across the case without having to train the system, which can use up valuable time and resources.

Also, upload an image from outside the case and compare it to pictures within the current case without ingesting it.

Get a head start on your investigation with URL detection and parsing capabilities across devices without regard to browser, neatly organized under one section to easily review the data and connect the dots in your investigation.

FTK will ingest and support updated versions of LX01 and E01 images.

Automatically import and expand a nested forensic image with image within an image support.

Import and parse AFF4 images created from Mac computers (generated by third-party solutions like MacQuisition by BlackBag).

Parse XFS file systems when investigating and collecting from RHEL Linux environments.

Leverage the power of your forensic environment with optimized support for unified database for the AWSAmazon RDS configuration.

Ftk Imager Lite