Английская Википедия:Forensic Toolkit
Forensic Toolkit, or FTK, is a computer forensics software originally developed by AccessData, an Exterro company. It scans a hard drive looking for various information.[1] It can, for example, potentially locate deleted emails[2] and scan a disk for text strings to use them as a password dictionary to crack encryption.[3]
FTK is also associated with a standalone disk imaging program called FTK Imager. This tool saves an image of a hard disk in one file or in segments that may be later on reconstructed. It calculates MD5 and SHA1 hash values and can verify the integrity of the data imaged is consistent with the created forensic image. The forensic image can be saved in several formats, including DD/raw, E01, and AD1.[4]
References
External links
AccessData Forensic Toolkit (PDF)
