2.7 - Exterro FTK Imager #

2.7.1 Lab Objectives #

By the end of this lab you should be able to:

• Install FTK Imager.

Download Link: https://go.exterro.com/l/43312/2022-01-21/f6h1s3

• NOTE: You will need to fill out the form in order to download the software.

FTK® Imager is a data preview and imaging tool used to acquire data (evidence) in a forensically sound manner by creating copies of data without making changes to the original evidence. With FTK Imager you can:

• Create forensic images of local hard drives, CDs and DVDs, thumb drives or other USB devices, entire folders, or individual files from various places within the media.
• Preview the contents of forensic images stored on the local machine or on a network drive.
• Create hashes of files to check the integrity of the data by using either of the two hash functions available in FTK Imager: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA-1).