July 11, 2006
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Extensive features beyond basic forensics.
- Weaknesses: Documentation can be vague at certain points, especially in the more complex areas of the program.
- Verdict: Very powerful program with tons of great features at an affordable price.
The Forensic ToolKit (FTK) is very powerful and comes loaded with features, although it is naturally difficult to make such a powerful tool completely simple to use. The program interface can overwhelm at first glance, with all its different features and options, but after reading the documentation and getting to know the program, it becomes much more intuitive.
This program is rich with features. As a basic IT forensic tool, it includes features such as a registry viewer, in-depth easy-to-read logging, an easy-to-use standalone disk imager, and direct email and zip file analysis. The features do not stop there though.
We found this program to be an excellent and comprehensive forensic toolkit. And with its extended features such as the password recovery feature, for gaining access to protected files to search for evidence, and the powerful Distributed Network Attack feature, which can be used to crack encrypted files over a network, we thought that its performance as an incident response tool was formidable.
FTK performed excellently for all our tests. The easy to read logs and information screens made it simple for us to acquire our test disk and draw in-depth conclusions from our collected data.
Documentation for this product is quite good. The manual is a PDF file included on the software CD and it contains all installation and user information for the program. We found it to be a fairly easy read and quite easy to navigate. However, we did find it was not very specific in some of the more complex areas of the product's features which is where manuals are most useful.
The AccessData support centre has several ways in which to find technical and product support. The first is offered both by phone and email. For additional product support, the site includes a forum, customer service phone number, and customer service email.
AccessData makes owning FTK easy. It is powerful and loaded with features for very little cost, and is both a great IT forensic tool and very cost-effective. For example, as long as users have an active dongle, they can download updates and new product versions straight from the website.
SC Webcasts UK
Information Security Manager
Infosec People - Hammersmith, West London
Information Security Risk Manager, £45-55k + bens
Infosec People - West Midlands, England, Coventry
SOC Analyst, Aldershot, £55-63k + benefits
Infosec People - England, Aldershot, Hampshire
Security Architect, Cardiff - to £70k Basic
Infosec People - Cardiff, Wales
Interim CISO (Chief Information Security Officer) - Cyber Security Director
CYBER EXECS - London (Central), London (Greater)
Sign up to our newsletters
SC Magazine UK Articles
- Gooligan ad fraud malware infects 1.3M Android users, installs over 2M unwanted apps
- Met Police grab suspect with phone unlocked to get hold of data
- Cyber-security must reflect risk not just regulation
- Data centres are on the move - where will they end up?
- Same fate befalls Post Office broadband as hit DT?
- SC Awards Europe 2016 winners announcements!
- ISIS radicalises 'lone wolves' through strong social media presence
- Updated: How will Brexit affect the cyber-security industry in UK and Europe?
- 9.2 million medical records for sale on darkweb
- Microsoft Office 365 hit with massive Cerber ransomware attack, report
- Former Expedia IT employee admits to hacking execs from the inside
- Cyber-insurance: What will you be able to claim for and is it worth it?
- Levelling the playing field against targeted attacks
- India Supreme Court calls on tech giants to curb sexual assault, cyber-crime
- IoTSF conference: EU should become de facto regulator