FTK

DIGITAL INVESTIGATIONS

Zero In On Evidence Faster—recognized

around the world as the standard in computer
forensics software
With the growth of big data from the wide variety of devices and systems, it can be challenging to find and
collect relevant evidence in a timely and efficient manner. Whether you are law enforcement dealing with
the growing backlog of devices waiting to be processed or a company searching through massive amounts
of data from multiple sources, FTK® cuts down on investigation time and resources needed by providing
you with an integrated forensics solution preferred by expert digital investigators.

What is FTK? Unmatched Processing Speed and a More

FTK is an award-winning, court-cited digital investigations Reliable Environment
solution built for speed, stability and ease of use. It quickly With customizable processing, you have the ability to
locates evidence and forensically collects and analyzes any establish enterprise-wide processing standards, creating
digital device or system producing, transmitting or storing consistency for your investigations and reducing the
data by using a single application from multiple devices. possibility of missed data. Since evidence is processed up
Known for its intuitive interface, email analysis, customizable front, you don’t have to wait for searches to execute during
data views, processing speeds and stability, FTK also the analysis phase. FTK is designed to provide the fastest,
lays the framework so your solution can grow with your most accurate and consistent processing with distributed
organization’s needs for a smooth expansion. processing and true multi-threaded/multi-core support.

Unlike other products on the market, Why Multi-Threading/Multi-Core Support?

FTK offers: FTK uses 100 percent of its hardware resources and is more
One Shared Case Database reliable in the event of hardware or software glitches. You
All digital evidence is stored in one case database, giving can also benefit from processing data faster since FTK uses
teams access to the most current case evidence. It reduces all hardware resources!
the time, cost and complexity of managing your cases. You
Faster Searching with Consistent Results
won’t experience failures associated with memory-based
Indexing is done up front, so filtering and searching are
tools like you can with other products on the market. For
faster than with any other solution. FTK offers the flexibility
example, if the GUI crashes, the processing will continue,
to perform multipass data review and change indexing
and best of all, there is continuous data transfer between
options without reprocessing your data. Whether you are in
Exterro’s forensic and e-discovery solutions, allowing for
the investigating phase or performing document review, you
true collaboration among all parties working on the case.
have a shared index file, eliminating the need to recreate or
duplicate the file. Most importantly, you’ll receive consistent
search results.
Plus, get all of these important features… intent or correlate other events and instant message
FTK allows users to create images, process and analyze conversations or social media sites can contain evidence.
a wide range of data types from forensic images to email FTK groups URL search history from all browsers in one
archives and mobile devices, create custom scripts, review section, organized by date, time, and category (e.g., Adult,
data offline and scale with distributed processing and the Chat, Dark Web, News, etc.)
cloud—all within a single solution.
Create Custom Python® Scripts
QView® Integration Run your own Python script within FTK, eliminating the risk
Enjoy the simple, intuitive and customizable, panels-driven of data spoliation by keeping the data in one location.
review interface of QView. Designed with the reviewer
Distributed Processing
in mind, QView utilizes multi-case functionality such as
Add up to three distributed processing engines on the fly
tagging, searching, labeling and bookmarking across multiple
with auto-scaling, leading to better resource allocation.
cases. And, easy mobile chat application and multimedia
review, along with similar face and image detection are all Portable Case
backed by a unified database. Export your data into a portable case for offline review.
No need to spend time generating reports that can only
Facial & Image Recognition
be viewed in a couple of different formats. Portable case
Train your system to look for specific individuals or find
makes your life easier with a quick export. Also, labels and
objects within images and then filter your results to look
bookmarks created by the reviewers are synced back to the
only at those pictures. Speed up investigations and draw
original case.
connections without looking through every image or
thumbnail. Use the Power of the Cloud
Achieve flexibility and save money by using the power of
Facial and Object Detection
the cloud to scale your environment—just bring your
Quickly locate all images of a person or object across the
own license to the marketplace.
case without having to train the system. Also, you have
the ability to upload an image from outside the case and Support for Apple® File Systems
compare it to pictures within the current case without As BYOD has taken over, organizations frequently need to
ingesting it. process data from Apple devices. With FTK, you can quickly
parse through data from any Apple operating system up to
Manage Mobile Data
macOS® 10.15 (Catalina).
Locate, manage, and filter mobile data more easily with a
dedicated Mobile Tab and Message Application filter to isolate Visualization
data from messaging apps like WhatsApp® and Facebook®. Automatically construct timelines and graphically illustrate
Also, be able to intuitively review UFED reports, XRY case files relationships among parties of interest in a case. With
and email and chat conversations in a Email, Social and File Visualization you can view data in
near-native viewer. multiple display formats, including timelines, cluster graphs,
pie charts, geolocations and more, to help you determine
Internet Browser and Web-Based Email Evidence
relationships and find key pieces of information. Then
Almost every investigation involves the analysis of Internet
generate reports that are easily consumed by attorneys,
artifacts. Web-browsing caches store records of sites a
CIOs or other investigators.
suspect has visited, web-based emails may help to prove

Visit us online: www.exterro.com © 2021 Exterro, Inc.