G2

Pinkee H.

IT Auditor

Higher Education

Small-Business (50 or fewer emp.)

9/3/2019

"A staple for investigations!"

5/5

What do you like best about FTK Forensic Toolkit?

We chose it as our computer forensics tool for our higher education system component office because of its ease of use, fast learning curve and comprehensive visualization. FTK was perfect because it is quick to learn and it gathers a huge amount of information. The install goes smoothly and the training is top notch! Review collected by and hosted on G2.com.

What do you dislike about FTK Forensic Toolkit?

Processing takes a while, but not a drawback at all. Sometimes depending on the size of the image, these things take time. Review collected by and hosted on G2.com.

Recommendations to others considering FTK Forensic Toolkit:

While it is acceptable to have your database on the same machine as your GUI and your processing engines, our experience has been that if you can, storing them on a separate Probox improved performance markedly. For training, see if you can buy a year long pass. Worth the investment! Review collected by and hosted on G2.com.

What problems is FTK Forensic Toolkit solving and how is that benefiting you?

It will literally cut your investigation time into a fraction of the amount you would have spent doing things the hard way. FTK is database-driven. As you collect data from a hard drive, the tool puts it into a back-end database and indexes it. Index searches are very fast. If index searching is not for you in a particular circumstance, the live search lets you search for items using search patterns, hex or text. Because the live search seeks cluster to cluster instead of accessing the index, it is much slower. However, this type of searching is not as frequent as index searches. Data is also broken down where you can view them in separate tabs – email, video, Internet/chat, and bookmarks. Review collected by and hosted on G2.com.