FTK® Imager 4.3.0

FTK® Imager is a data preview and imaging tool used to acquire data (evidence) in a forensically sound manner by creating copies of data without making changes to the original evidence. The 4.3.0 release of FTK Imager includes significant speed improvements in image creation—we've seen the time to image a device cut in half! To achieve this speed increase, we optimized the method we use to preserve the forensic image. The imaged computer was in another building with a 10Gbps link between the imaged machine and the server. Below are the details:

System 1 where image was taken from physical drive:

HP® EliteDesk® 800
Windows® 10 Pro
Intel® Core™ i7-8700 CPU @3.20GHz
32 Gig RAM
477 GB SSD drive

System 2 where image was stored:

Dell Poweredge® R720
Windows Server 2016 Standard
Intel Xeon® CPU E5-2620 0 @2.00GHz
32 Gig RAM
4TB Dell PERC H710 SCSI Disk Device (RAID 0, 4 - 1TB 7200 HD)

The results are as follows:

FTK Imager version 4.2.x and earlier:

Compressed images: 2:21:00
Non-compressed images: 4:16:23

FTK Imager version 4.3.x and newer:

Compressed images: 1:03:41
Non-compressed images: 1:29:25

In addition to the speed improvements, with 4.3 you can also capture and view APFS images from Mac® hard drives. You only need one tool for all operating systems.

You can already do so much with FTK Imager. Now, you can do it faster. Click here to find out what else Imager can do.

To download FTK Imager, please fill out the form below:

 

*By selecting 'Yes' you are opting in to marketing communications and consent to receive communications regarding products, services and offerings from AccessData. You may update your email preferences at any time. Please see our Privacy Policy for more details.