Latest release of FTK Imager 3.0 is available here with new and improved features that make it a valuable tool for the forensic investigator in the process of evidence adquisition and preview and analysis.
One key addition in my opinion is the support for reading and creating Advanced Forensics Format (AFF) images. This is a step forward in making AFF more widely used in the community.
This release also provides the ability to mount a forensic image (i.e. AFF/dd/E01/S01) as a physical drive, giving us a free alternative to, for instance, Mount Image Pro. By using this feature we'll be able to run the evidence image in tools such as VMware or LiveView.
FTK Imager 3.0 so far is only available for Windows in full version (with installation required). All the other platforms (Linux, Mac OS) and options (lite, CLI) remains available for version 2.9
No comments:
Post a Comment