Skip to content

The Forensic Toolkit (FTK) is a commercial forensic software package distributed by AccessData.

Features

The Forensic toolkit can parse a number of filesystems, including FAT 12/16/32, NTFS, NTFS Compressed, ext2 and ext3. It can use image files created by AFF, EnCase, SMART, Snapback, some versions of Safeback and dd.

The program allows users to search with keywords or take advantage of drive indexing using the dtSearch algorithm.

Data Reduction

The Known File Filter, or KFF, can be used to eliminate or highlight known files using MD5 hashes generated by user or from NIST or Hashkeeper.