Abstract
This chapter provides the reader with an overview of the functions of AccessData FTK and registry viewer. The aim of the chapter is to provide a student with the fundamentals of the software so that she can start working with the products without being totally in the dark about how they work. The chapter begins with describing the process of creating a case and configuring preprocessing options in FTK. Then, the chapter provides an orientation of the most commonly used functions in FTK. While the orientation does not cover all functions in FTK, it does provide enough knowledge to let the reader efficiently learn FTK on her own. After exploring FTK, the chapter describes the basic functions of AccessData Registry viewer. Registry viewer is a tool that is used to analyze Windows registry hives. Registry viewer contains functionality such as advanced searching and reporting functionality and interprets several types of registry data automatically.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Author information
Authors and Affiliations
Corresponding author
Rights and permissions
Copyright information
© 2017 The Author(s)
About this chapter
Cite this chapter
Kävrestad, J. (2017). FTK Specifics. In: Guide to Digital Forensics. SpringerBriefs in Computer Science. Springer, Cham. https://doi.org/10.1007/978-3-319-67450-6_10
Download citation
DOI: https://doi.org/10.1007/978-3-319-67450-6_10
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-67449-0
Online ISBN: 978-3-319-67450-6
eBook Packages: Computer ScienceComputer Science (R0)