The Forensic Toolkit (FTK) is a commercial forensic software
package distributed by AccessData.
The Forensic toolkit can parse a number of filesystems, including
FAT 12/16/32, NTFS, NTFS
Compressed, Ext2, and Ext3. It can
use image files created by AFF,
Snapback, some versions of
Safeback and dd.
The program allows users to search with keywords or take advantage of
drive indexing using the
The Known File Filter, or KFF, can be used to eliminate or highlight
known files using MD5 hashes generated by user or from
Forensic Toolkit information from