Forensic Toolkit® (FTK®) is recognized around the world as the standard in computer forensic investigation technology. This court-validated platform delivers cutting edge analysis, decryption and password cracking all within an intuitive, customizable and user-friendly interface. In addition, with FTK, you have the option of utilizing a back-end database to handle large data sets. Or you can work without one if application simplicity is your goal. Either way you will get the benefit of best-of-breed technologies that can be expanded to meet your ever-changing needs. Known for its intuitive functionality, email analysis, customizable data views and stability, FTK is the smart choice for stand-alone forensic investigations.

An Integrated Solution

• Create an image, view the registry, conduct an investigation, decrypt files, crack passwords, and build a report all with a single solution.
• Recover passwords from over 80 applications; harness idle CPUs across the network to decrypt files and perform robust dictionary attacks.
• Full Unicode and Code Page Support lets you search, display and report on data in its native format, in any language Unicode supports.
• Industry-leading data carving engine allows you to specify criteria, such as file size, data type and pixel size to reduce the amount of irrelevant data carved while increasing overall thoroughness.
• Leverage a number of different integrated viewers and an integrated media player to view any given set of data.
• Broad file system support and advanced email support.

Integrated Oracle Database & Enhanced Searching

• Supports the largest, most complex investigations.
• Instantaneous access to data while processing.
• Powerful search functionality with Oracle, DT Search and a proper full-feature regular expression engine for binary searches.

Powerful Processing and Speed

• Deep and mature data processing engine.
• Pre-processing refinement allows you to exclude irrelevant data as you load it, greatly reducing processing time.
• True multi-processor and multi-threading support.

Intuitive Interface and Rich Functionality

• Easy-to-understand and easy-to-use GUI with user-definable views, filtering, dockable windows and automated data categorization.
• Rich and powerful reporting engine with a wizard that allows you to create detailed reports and output them into native format, HTML and PDF, with links back to the original evidence.
• Easy export functionality to extract relevant artifacts without compromise — maintaining source, metadata and path.