New Versions of Exterro’s FTK® and FTK Lab Deliver Expanded and Enhanced Internet and Mobile Analysis

Company also announces the ability to export data into a portable case for review by non-technical users

Orem, Utah – May 28, 2020 – Exterro, a leading provider of integrated digital forensics and e-discovery software, today announced the release of FTK® and FTK Lab 7.3, new versions of the company’s digital forensics software solutions that feature enhancements that make it easier for users to parse and investigate mobile devices and internet-based artifacts.

“This release gives our customers the ability to review more types of data from more systems and files, including Android™ and iOS platforms,” said Harsh Behl, director of product management at Exterro. “We present it in a meaningful way across datasets and cases which allows our customers to use fewer tools and gain fast insights into internet and mobile data.”

FTK (Forensic Toolkit®) is a court-cited digital investigations software tool built to help customers find relevant evidence faster, dramatically increase analysis speed and reduce backlogs. FTK Lab is a large-scale investigations and processing engine that enables computer forensics labs of all sizes to provide their teams with collaborative analysis, centralized case management and web-based review, thereby dramatically streamlining the investigative process.

The 7.3 release of FTK and FTK Lab seeks to build on the already trusted and proven technology of Exterro processing and deliver key features that will allow investigators to analyze more data types wherever and on whatever device they are stored on. This feature-rich release includes the following enhancements and benefits for our customers.

  • Export your data into a portable case for offline review in QView™. No need to spend time generating reports that can only be viewed in a couple of different formats. Portable case makes your life easier with a quick export. Reviewers will appreciate the ability to view the data in a near native format.
  • Easily review internet artifacts with URL detection and parsing capabilities across devices without regard to browser, neatly organized under one section. Supported categories include, Adult, Anonymity, Business, Chat, Computing, Dark Web, e-commerce, file hosting sites, News, Phishing, Search Engines, Social Media, Tracking and Webmail.
  • FTK will now ingest and support updated versions of LX01 and E01 images, created from the Tableau Forensic Imager (TX1) devices.
  • With 7.3, users can now automatically import and expand a nested forensic image with image within an image support.
  • Import and parse AFF4 images created from Mac® computers (generated by third-party solutions like MacQuisition by BlackBag).
  • Users now have the ability to parse XFS file systems when investigating and collecting from RHEL Linux environments.
  • With optimized support for unified database for the AWS/Amazon RDS configuration users can leverage the power of their forensic environment by hosting their FTK database in AWS. Upload, process and review with unmatched speed and scalability.
  • Locate, manage, and filter mobile data more easily with a dedicated mobile tab. Use the new message application filter to quickly isolate data from message applications like WhatsApp or Facebook.
  • Building on the ability to extract EXIF images, users can now view all associated EXIF data, including location and make and model of the device used to capture the images or video.
  • Cut down on OCR time by up to 30% with the newly updated OCR engine. Additional support has been added for language identification.

“We are proud that this release contains many customer requested features and checks a lot of boxes for them in the mobile and internet analysis area,” said Behl.

For more information about the FTK and FTK Lab enhancements, please click here.