AccessData releases FTK 5
FTK 5 is designed to be capable of exposing more data in less time then previous versions
AccessData has released its Forensic Toolkit (FTK) 5, which is designed to be faster and more comprehensive than the previous versions.
FTK 5 is designed to be capable of exposing more data in less time then previous versions, and includes data visualisation and explicit image detection (EID) out of the box. Data Visualisation features automated graphical timeline construction and analysis of social relationships, and investigators can include visualisation images in their case reports. Explicit Image Detection (EID) detects not only flesh tones but conducts a thorough analysis of shapes and orientation. Furthermore, FTK 5 integrates with Microsoft PhotoDNA which creates a signature for a digital image, like a fingerprint, that can be compared with the signatures of other images to find copies and variations of images of interest.
"The release of FTK 5 significantly raises the bar for forensic analysis tools," said Brian Karney, president and COO of AccessData. "FTK 5 allows users to access and identify that important data so much faster than other tools, streamlining time consuming tasks and helping minimise case backlog."
FTK 5 also delivers enhanced internet analysis with a new dedicated Internet/Chat tab that is designed to allow users easier access to these artifacts that are more and more often integral to a case. The enhanced analysis capabilities include new internet artifact carvers for more than 30 additional web applications/services, social media sites and games. Google Chrome analysis enhancements feature easier navigation through artifacts, web page reconstruction and the creation of individual records from Chrome artifact tables for bookmarks, cookies, credit card data, data profile, downloads, history, keywords, login data, top sites and web auto-fill data.
In addition, AccessData has enhanced the integration of its decryption technology, PRTK. Now, FTK users can send files directly to PRTK for on-the-fly password recovery during evidence review. The Forensic Toolkit platform is also designed to deliver its own enhanced file decryption with FTK 5 now able to decrypt almost as many file formats as PRTK. In addition, users can import password lists to automatically decrypt files during the initial processing phase.
With every copy of FTK5, users will receive a Mobile Phone Examiner Plus (MPE+) Essential license. MPE+ Essential operates as a full MPE+ license for 30 days after the purchase or upgrade is activated, offering access to all features and devices. After this time, users will be given the option to purchase the full license of MPE+ or continue with the MPE+ Essential license. MPE+ Essential allows users to perform full iOS and Android device examinations. MPE+ is the only mobile device analysis solution on the market to integrate seamlessly with FTK, allowing investigators to correlate evidence from multiple mobile devices with multiple computers within a single interface.
AccessData is also offering, for a limited time, special pricing on a Forensic Toolkit/Mobile Phone Examiner Plus subscription bundle. As these two solutions both provide unparalleled analysis and work together to allow easy correlation of data from multiple mobile devices and computers, many practitioners are opting to add both products to their digital forensics arsenal. This subscription offer is intended to make that transition easier for budget-constrained organisations.