.product-purple li { color: #ffff; } p#ipp-innertext { color: #fff; }
Digital Forensics
FTK Imager

Create forensic images for free with Exterro FTK Imager.

Join the thousands of forensic professionals worldwide who rely on FTK Imager, the forensic industry’s preferred data imaging and preview solution, for the first step in investigating an electronic device.

Thousands of forensic investigators depend on Exterro FTK Imager.

Overview
Quickly assess electronic evidence, create forensic images, and generate hash reports

FTK Imager is a free data preview and imaging tool used to acquire electronic evidence in a forensically sound manner by creating copies of computer data without making changes to the original evidence.

Create Forensic Images
With FTK Imager, you can create forensic images of local hard drives, CDs and DVDs, thumb drives or other USB devices.
Preview Data
Preview the contents of forensic images stored on a local machine or on a network drive.
Evaluate Evidence
Evaluate computer evidence to determine if further analysis with a forensic tool such as the FTK® Forensic Toolkit is warranted.
Create perfect copies of computer data with Full-Disk Imaging.

FTK Imager can create perfect copies (i.e., forensic images) of computer data without making changes to the original evidence. The forensic image is identical in every way to the original, including file slack and unallocated space or drive free space. Keep evidence safe from harm or tampering while the investigation proceeds using the image.

Recreate the device user’s perspective with Image Mounting.

Mount an image for a read-only view that leverages Windows® File Explorer to see the content of the image exactly as the user saw it on the original drive. Recover files that have been deleted from the Recycle Bin, but have not yet been overwritten. Run virus scans or Python scripts on a mounted image to easily show a jury how a user would have seen their own files and folder structure.

Prove the integrity of your case evidence with Hash Reports.

Generate hash reports for regular files and disk images, including files inside disk images, that you can later use as a benchmark to prove the integrity of your case evidence. Hashes generated by FTK Imager can be used to verify that the image and the original drive are identical and that the image has remained unchanged since acquisition.

Law enforcement professionals have relied on Exterro FTK Imager for decades.
“I’ve used FTK Imager for nearly 20 years. Imager has always been a dependable imaging tool but the recent improvements in speed are really outstanding. We've seen the time to image a device cut in half! Great work!”
Tom Angle
Forensic Consultant, Federal Law Enforcement
Additional Capabilities
Custom Content Images
Select only the data you want to image making your investigation more efficient, yet still forensically sound.
Data Preview
Preview the contents (i.e. files on local hard drives, CDs, USB devices, etc.) of forensic images stored on a local machine or on a network drive before imaging it.
RAM Capture
Perform memory capture or registry capture on a live device to recover passwords or other data stored in memory on the active device.
Export Files
Write and read the most common forensic image formats, making it easy to continue your forensic analysis and review FTK Forensic Toolkit.
Exterro FTK Imager
Frequently asked questions

What type of digital devices can Exterro FTK Imager collect from?
Does Exterro FTK Imager work with cell phones and mobile devices?
What operating systems can Exterro FTK Imager run on?    
What hash validation does Exterro FTK Imager use?
Can Exterro FTK Imager collect from live devices?
How fast can I image a hard drive?
Exterro FTK Imager

Ready to start imaging devices?

Install FTK Imager for free today.

FTK Imager vs. FTK Imager Pro
Is Exterro FTK Imager Pro the Right Tool for You?

With FTK Imager Pro, you can:

Incident Response and DFIR Teams
Preview compromised systems, preserve volatile data, and create forensic images to support further analysis.
Law Enforcement and Digital Forensic Examiners
Conduct on-scene triage, verify whether evidence exists, and acquire drives using documented forensic imaging methods.
Corporate Security and HR Investigations
Assess devices discreetly to determine whether deeper forensic analysis is required.

Ready to learn more?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat.

Exterro FTK Imager Pro

Ready to go Pro?

Learn more about FTK Imager Pro and what it can deliver for you.

Resources

Learn how Exterro FTK Imager can power your forensic investigations.

Learn how to use Exterro FTK Imager

Take the FTK Imager on-demand Training Course.