1. FTK
Using FTK

2. Forensic Tools Overview
FTK is part of a commercially available suite of forensic tools from Access Data. The primary components are:
Forensic Toolkit
Registry Viewer
Password Recovery Toolkit
FTK Imager

3. Forensic Tools Overview
FTK is part of a commercially available suite of forensic tools from Access Data. The primary components are:
Forensic Toolkit
Registry Viewer
Password Recovery Toolkit
FTK Imager

4. Forensic Tools
Start a new case.

5. Forensic Tools

6. Forensic Tools

7. Forensic Tools

8. Forensic Tools

9. Forensic Tools

10. Searching
Basic Searching
AND:
OR:
W/#: Within #
NOT
NOT W/#

11. Searching Special Characters ? Single Character appl? apply apple *
Any Number of Characters
appl* apply apple application
Adapted from AccessData

12. Searching Special Characters % Fuzzy Search Bana%na # Phonic Search
Banana Bananna #
Phonic Search
#born born bourn bourn
&
Synonym Search
fast& quick, etc.
Adapted from AccessData

13. Searching Special Characters ~~ Fuzzy Search Bana%na : Phonic Search
Banana Bananna :
Phonic Search
#born born bourn bourn
Adapted from AccessData

14. Searching Regular Expressions
US Phone Number=((\<1[\-\. ])?(\(|\<)\d\d\d[\)\.\-/ ] ?)?\<\d\d\d[\.\- ]\d\d\d\d\>
Credit Card Number=\<((\d\d\d\d)[\- ]){3}\d\d\d\d\>
Social Security Number=\<\d\d\d[\- ]\d\d[\- ]\d\d\d\d\>

15. Searching Regular Expressions
IP Address=\<[1-2]?[0-9]?[0-9]\.[1-2]?[0-9]?[0-9]\.[1-2]?[0-9]?[0-9]\.[1-2]?[0-9]?[0-9]\>