Locate, manage, and filter mobile data more easily with a dedicated mobile tab.
Cut down on OCR time by up to 30% with our efficient OCR engine.
Host your FTK database in AWS to upload, process and review for unmatched speed and scalability.
Leverage the power of your forensic environment with optimized support for unified database for the AWS/Amazon RDS configuration.
Parse XFS file systems when investigating and collecting from RHEL Linux environments.
Import and parse AFF4 images created from Mac ® computers (generated by third-party solutions like MacQuisition by BlackBag).
Automatically import and expand a nested forensic image with image within an image support.
FTK will ingest and support updated versions of LX01 and E01 images.
Get a head start on your investigation with URL detection and parsing capabilities across devices without regard to browser, neatly organized under one section to easily review the data and connect the dots in your investigation.
Also, upload an image from outside the case and compare it to pictures within the current case without ingesting it.
Similar face and object detection allow investigators to quickly locate all images of a person or object across the case without having to train the system, which can use up valuable time and resources.
Reviewers will also appreciate the ability to view the data in a near-native format.
Export your data into a portable case for offline review and sync back labels, bookmarks, comments and notes to the original case.
And, a panels-driven interface means that you can customize the view to your liking. Enjoy easy mobile chat application and multimedia review, along with similar face and image detection all backed by a unified database. Utilize multi-case functionality such as tagging, searching, labeling and bookmarking across multiple cases.
QView™ integration introduces a simple, intuitive and customizable review interface.
Supports decryption of File Vault 2 from the APFS file system.
Also label, bookmark and export individual objects per category, allowing for easy searching, filtering and reporting.
Parse even more registry and Windows events in an easy to read, interactive and reportable Windows System Information tab.