

Additionally, FTK performs indexing up-front, speeding later analysis of collected forensic artifacts.ĮnCase is a commercial forensics platform.

It claims to be the only forensics platform that fully leverages multi-core computers. AccessData FTKĪccessData Forensics Toolkit (FTK) is a commercial digital forensics platform that brags about its analysis speed. Despite this, it boasts an impressive array of features, which are listed on its website here. The company also offers a more stripped-down version of the platform called X-Ways Investigator.Ī major selling point of the platform is that it is designed to be resource-efficient and capable of running off of a USB stick. X-Ways Forensics is a commercial digital forensics platform for Windows.
ACCESSDATA FTK IMAGER TOOL WINDOWS
As a result, they include functionality from many of the forensics tool categories mentioned above and are a good starting point for a computer forensics investigation.Īutopsy and The Sleuth Kit are available for both Unix and Windows and can be downloaded here. These tools are designed to analyze disk images, perform in-depth analysis of file systems and include a wide variety of other features. Autopsy/The Sleuth KitĪutopsy and The Sleuth Kit are probably the most well-known and popular forensics tools in existence. This is a core part of the computer forensics process and the focus of many forensics tools. Forensic disk and data capture tools focus on analysis of a system and extracting potential forensic artifacts, such as files, emails and so on.
