Title: 2. Using AccessData Forensic Toolkit to Analyze Data
Course: IN 2005 Digital Forensics > Section: Module 9: Chapter 9 - Computer Forensics Analysis and Validation

Using AccessData Forensic Toolkit to Analyze Data

1. FTK supports FAT12, FAT16, FAT32, NTFS, Ext2fs and Ext3fs file systems.  Also, FTK can interact with several other forensic tools.
2. The two keyword searching options available on FTK, as well as their advantages and disadvantages including performance and accuracy.  Searches can be refined with different options. See Figures 9-1 and 9-2.
3. FTK can analyze compressed files.
4. See Figure 9-3 to see how to create bookmarks on FTK and how to use those bookmarks for creating a final investigation report.