Digital Forensics with the AccessData Forensic Toolkit (FTK)

Learn how to use AccessData’s Forensic Toolkit (FTK) while mastering the fundamentals of digital forensics

Digital Forensics with the AccessData Forensic Toolkit (FTK) provides a comprehensive review of essential digital forensics concepts and builds on this information to teach you how to conduct digital investigations with AccessData’s FTK—the industry-standard, court-accepted digital investigations platform.

Part I covers the technology all digital forensics investigators need to understand, specifically data, storage media, file systems, and registry files. Part II explains how best to use FTK 5 tools, including FTK imager, FTK registry viewer, and the Password Recovery Toolkit (PRTK), to conduct legally defensible investigations.

• Written by a digital forensics expert and AccessData instructor
• Perfect self-study guide for the AccessData Certified Examiner (ACE) exam
• "Kit Trick" notes highlight best practices for using FTK
• "Case File" sidebars feature insights from actual digital forensic investigators

Part I: Forensics Fundamentals
Chapter 1: Digital Forensics
Chapter 2: Data Storage
Chapter 3: File Systems
Chapter 4: Windows Registry
Chapter 5: Windows Artifacts
Part II: AccessData’s Forensic Toolkit (FTK)
Chapter 6: Introduction to FTK
Chapter 7: FTK Basics
Chapter 8: FTK Advanced
Chapter 9: FTK Imager
Chapter 10: FTK Registry Viewer
Chapter 11: Password Recovery Toolkit
Chapter 12: Visualization in FTK
Chapter 13: Explicit Image Detection
Chapter 14: Cerberus
Chapter 15: The ACE Test
Glossary