FTK Imager - Forensic Acquisition Tool - FTK Imager Tutorial - FTK Image Loading Analysis

preview_player
Показать описание
In this video, we will use FTK Imager Forensic Acquisition Tool to create a physical disk image of a suspect drive connected to our forensic workstation. FTK Imager is a GUI tool for imaging various types of data for forensic analysis. FTK Imager - Forensic Acquisition Tool - FTK Imager Tutorial - FTK Image Loading Analysis

#FTKImager #DigitalForensics #ComputerForensics #Investigation #ComputerInvestigation #Tutorial #FreeEduHub #freeeducation

Download link:

Reference Material:

Join us on

Best Deals

Best Coupons

Digital Deals

Warehouse Deals

Key Points:

Introduction to FTK Imager:
* FTK Imager is a forensic acquisition tool used for creating images of hard drives for investigation purposes.
* It supports both internal and external disks, including USB devices.

Downloading FTK Imager:
* The software is available for free download after filling out a form on the official website.

Creating an Image of a Physical Drive:
* The tutorial demonstrates creating an image of a physical drive (USB pen drive) using FTK Imager.
* It explains the difference between physical and logical drives and the process of selecting a drive for imaging.

Image File Formats and Settings:
* FTK Imager supports various image file formats, including raw DD, E01, and AFF.
* The tutorial covers setting image fragment sizes, compression options, and verification settings.

Mounting and Analyzing the Image:
* Once the image is created, it can be mounted as a physical or logical drive in read-only format.
* The tutorial shows how to browse the contents of the mounted image, including deleted data recovery.

Exporting Hash Lists and File Extraction:
* FTK Imager allows exporting hash lists of files within the image for verification purposes.
* Users can extract specific files from the image to a chosen location.

Additional Features:
* The software offers features like capturing memory, detecting encrypted files, and recovering registry values.
* It provides options for exporting images and verifying their integrity.

Additional Notes:

The video is a comprehensive tutorial on using FTK Imager for digital forensics.
It is suitable for beginners in digital forensics, providing step-by-step instructions on creating and analyzing disk images.

Your Queries:
FTK Imager
Forensic Acquisition Tool
FTK Imager Tutorial
FTK Image Loading Analysis
How to create image using FTK Imager
How to do forensics analysis using FTK Imager
Forensics toolkit
Free Education Academy
Рекомендации по теме
Комментарии
Автор

That is the best video explanation I have found on FTK. Thank you for the attention to detail.

coachluisms
Автор

My old mobile device not detected in ftk imager physical disk. What to do now..

rajaarya
Автор

Sir, this is to much informative and practical video. I will request you that please add mobile forensic, audio video forensic, image forensic and others related to digital forensic ..
Your wording style is impressive because its easy to understand ..

banksinfo
Автор

I have a image, if i mount it i can see the file that come from the DVD, but if i wan to export it i cant select a file because no one apear in the "Evience Tree"

josemanuelcordovavillanuev
Автор

Thnx for the information. Can we do work from home in ftk imager in jobs?

er.tariqalamfarooqi
Автор

Good video full of knowledge . Thank you. Please sir I like it if you make a video of FTK Image and dd in Ubuntu inside VMware work station

emmanuelswealth
Автор

I keep getting the BSOD as soon as I actually run the memory dump feature. Is there a fix for this issue?

listentopapi
Автор

Sir by using this software can we tell that what is the origin of any photo or video

pandey
Автор

Sir I'm facing a problem in imaging a pendrive. Every time when I try to image the pendrive like that you did in the above video, everytime I found ubd_drive.001 to be a WinRar archive file. Can you please suggest me what to do now...

Yadav-itku
Автор

Hi, thanks for sharing the video, great explanation btw but why my .001 extension is TXT?

ikhsansdq
Автор

How do you look for data if it's only being showed in hexadecimal form? Let's say I am looking for a document that was deleted, I can only see the contents in hexadecimal form, so how would I be able to find it without using autopsy browser or some other additional software?

samael
Автор

Hi
I have a question
Can we connect laptop hard disk as secondary HDD to system and take aquire the image of that
Is this possible

rakshithyadav