Forensic Tool Kit v 1.70
April 01, 2007
$1,095, plus support
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Good workhorse, especially in a Windows environment with access to the industry's premier password recovery suite.
- Weaknesses: Lacking some expected functionality and documentation could use a bit more beef.
- Verdict: A good second computer forensic tool, especially for Windows-heavy operations.
AccessData is one of the venerable developers of computer forensic software. The company’s biggest strength is that it is — and has been since its inception — the go-to supplier of password recovery tools. AccessData has packaged its complete tool set in one product called the Ultimate Toolkit. In addition to the Forensic Tool Kit, referred to by forensic analysts simply as FTK, the Ultimate Toolkit contains the full suite of password recovery tools, drive and media wipers, a registry viewer and other useful products.
Some of the tools interface nicely with FTK giving it a lot of power. At its core, however, FTK is the same computer forensic tool that it was last year and, while its biggest strength is its ability to take advantage of other AccessData tools, this product is pure computer forensics. Although its user interface is somewhat different from other products in its class, it still provides most of the same functions one would expect in a straightforward computer forensics tool.
FTK does not handle all of the types of media we would expect. However, it is strong in Windows files systems and does handle Linux file systems. This puts it at a bit of a disadvantage when compared with products that can acquire and analyze more file system types. FTK reads the most common types of images, including DD, EnCase and older versions of SafeBack, among others.
The product is easy to use if you are familiar with typical computer forensic tools. In addition, its terminology is consistent with the rest of the industry, a refreshing practice in a market that does not necessarily always use the same buzzwords from product to product. Installation is quick and straightforward, and it is up and ready to go in no time.
The documentation could be stronger. It consists of a single perfect-bound book, but many of the topics we expected, such as a discussion of the file systems FTK supports were not present. Support is an extra cost item. At $1,095, we find that its value for the money is good given that the functionality may be somewhat less than one would expect in certain situations.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Junior Penetration Tester, Hertfordshire, to £35k + benefits
Infosec People - England, Hertfordshire
Cyber Security Architect
CYBER EXECS - London (Greater)
SOC Analyst, Aldershot, £47-56k + package
Infosec People - Hampshire, England, Aldershot
Senior Security Engineer
Loveworklife Recruitment - United Kingdom
Sign up to our newsletters
SC Magazine UK Articles
- Tesco Bank allegedly ignored warnings of hack from Visa
- Investigatory Powers and Digital Economy Bills could threaten economy
- Updated: A million German routers knocked offline by failed Mirai botnet attack
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Microsoft update left Azure Linux virtual machines open to hacking
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- ICYMI: Tesco warned; IP Bill threatens economy; German routers offline; Azure trojan; Gooligan fraud
- Data centres are on the move - where will they end up?
- 90% of ITDMs believe IAM is crucial to digital transformation success
- Research: Hacked companies could see customer exodus if breached
- Misconfigured drive exposes locations of explosives used by oil industry