Looking to get a head start on your digital investigations?
The recent release of FTK 7.4.2 features parsing support for Windows System Information. This enhancement allows users to parse AmCache registry files, SRUM artifacts, Windows timeline events, and much more.
In addition, within the System Information Tab, you can also label, bookmark and export individual objects per category, allowing for easy searching, filtering and reporting.
Forensic imaging is the hottest part of the digital forensic investigation process. Decisions made while imaging can affect the entire investigation and could make or break your case. Join Sarah Hargreaves, Director of Training at AccessData, for an informative webinar on FTK® Imager, one of the most popular imaging tools on the market.
Whether you’re just starting your career in digital forensics or you’re more experienced, you will benefit from learning how to use FTK Imager to:
• Create forensic images
• Preview files and folders
• Mount images for read-only views
• Create hashes of files
This 60-minute webinar is intended for an audience with Intermediate forensics experience. In this webinar, we will demonstrate:
• How to capture and analyze volatile memory utilizing AD Enterprise for system analysis and AD Enterprise or FTK for content searches.
• How to use live system searching by utilizing the AD Enterprise Filtered File System.
• A sneak peek at our enhanced Windows system information feature coming up in the next release!
Learn how you can utilize REGEX and TR1 expressions to find the data you really need. The true power behind FTK and AD Enterprise lies within the ability to create complex search strings utilizing keywords, dtsearch operators and expressions. This webinar looks at conducting Live, Index and File Filtered remote searches utilizing these powerful search techniques..
From multiple office locations, to massive employee pools and remote workers, AD Enterprise provide deep visibility into data. So you can respond quickly, remotely and covertly, while maintaining chain of custody.
When you need a best-in-class processing engine that produces repeatable results and maximum data discovery. When you need to review multiple mobile phones at once. And do it quickly. Look no further than FTK 7.4.