SOFTWARE FUNCTIONALITIES - FTK IMAGER

  Functionalities

The interface of the FTK Imager software is divided into seven different panes which are as illustrated down below.

                                                                                                    (Authors Work)

The listed panes are explained based on what was written in the Imagers' User Guide provided by ACCESSDATA(2007).

• MenuBar: This allows access to the software' features, which range from going into the settings to accessing process wizards such as Evidence Item wizard and Disk creation wizard.
• Evidence Tree: Displays evidence in the form of a hierarchical tree.
• ToolBar: Acts as a shortcut to commonly used tools.
• File list pane: Shows the list of available files.
• Status Bar: Shows the current status of the software and provides a short description on the button being hovered upon using the cursor.
• Hex Value Interpreter: Converts the hexadecimal values from the viewer pane into the date/time formats and integers.
• Viewer Pane: Is divided into three columns which show the offset, data of files in hexadecimal format and hexadecimal values in ASCII, respectively.

Reference:


ACCESSDATA, (2007). Forensic Toolkit Imager. [ebook] Lindon: AccessData Corp. Available at: <https://ad-pdf.s3.amazonaws.com/ImagerUsersGuide.pdf> [Accessed 8 December 2020].