SANS Institute - FTK Imager: Difference between revisions
From GCA ACT
Jump to navigationJump to search
(Updated via script) Tag: Manual revert |
(Updated via script) |
||
| Line 1: | Line 1: | ||
=Description= | =Description= | ||
<br> | <br> | ||
FTK Imager is a digital forensics tool used for acquiring and extracting data from digital media. FTK Imager can be used to connect to a live system and acquire data in a forensically sound manner, or to collect data from a system that has been powered down. FTK Imager can also be used to create disk images, which can be used for analysis or for creating a bootable environment for forensic analysis. | FTK Imager is a digital forensics tool used for acquiring and extracting data from digital media. FTK Imager can be used to connect to a live system and acquire data in a forensically sound manner, or to collect data from a system that has been powered down. FTK Imager can also be used to create disk images, which can be used for analysis or for creating a bootable environment for forensic analysis. | ||
<br> | <br> | ||
=More Information= | =More Information= | ||
Latest revision as of 02:56, 24 April 2024
Description
FTK Imager is a digital forensics tool used for acquiring and extracting data from digital media. FTK Imager can be used to connect to a live system and acquire data in a forensically sound manner, or to collect data from a system that has been powered down. FTK Imager can also be used to create disk images, which can be used for analysis or for creating a bootable environment for forensic analysis.
