Weekly study6 hours
FTK Administration and Interface
Master the main elements of FTK: its powerful database and versatile interface.
The Forensic Toolkit (FTK) is the environment within which the examination and analysis of forensic artifacts occurs.
This course walks you through the basics of FTK database administration, giving you the skills and knowledge you need to be able to carry out a number of key tasks within the software, including application administration, managing and changing passwords, disabling and enabling user accounts, opening and archiving cases, managing filters and labels and identifying evidence of processing options.
- Forensic Toolkit (FTK) components, including database management, FTK Graphical User Interface (GUI) and Known File Filter (KFF)
- File viewers
- Integration with other programmes, including Registry Viewer, Imager and Password Recovery Toolkit
Learning on this course
You can take this self-guided course and learn at your own pace. On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.
What will you achieve?
By the end of the course, you‘ll be able to...
- Apply the knowledge and skills necessary to install, configure and effectively use Forensic Toolkit (FTK), FTK Imager, Password Recovery Toolkit (PRTK) and Registry Viewe
- Evaluate AccessData products to conduct forensic investigations on Microsoft Windows systems and learn where and how to locate system artefacts
Who is the course for?
Students who want to master Forensic Toolkit’s administration and interface capabilities.
Please note that the staff described in the ‘Who will you learn with?’ section below may be subject to change.