.product-purple li { color: #ffff; } p#ipp-innertext { color: #fff; }
Combine powerful, lightning-fast distributed DPE processing with multi-user review functionality in a centralized investigative platform to get evidence into the hands of forensic investigators and resolve investigations faster.


With Exterro FTK Lab you can unleash the power of distributed processing and multi-user collaborative review to get through more digital evidence in less time, allowing agencies to clear out case backlogs, indict sooner, and close cases faster.
.jpg)
Produce astounding processing and indexing results with the distributed setup of Exterro FTK Lab. Process 7 TB of data with 11 DPEs in less than two hours, and process AFF4 Mac images 8x faster than the competition.
.jpg)
Perfect for computer forensics labs, Exterro FTK Lab’s centralized architecture and shared case database keep all parties on the same page, while fully securing electronic evidence at the case or file level. Non-technical users, such as attorneys and outside experts, can participate in the review process, regardless of their location.
.jpg)
Leverage Exterro FTK Lab’s powerful processing engine to parse computer and mobile data in a single database to find connections across data sources. FTK Lab supports native unprocessed UFD extractions from mobile devices provided by tools like Cellebrite, Oxygen, XRY or GrayKey. Review chat messages from apps like Twitter and WhatsApp, reconstructed in their near-native view to quickly interpret the conversation.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat.

From technology companies to organizations fighting child exploitation, Exterro’s partners make a difference for digital forensic investigators.
.jpg)
.png)
Increasing the processing power of FTK Lab is easily achieved with additional hardware. With its centralized processing farm infrastructure, you can configure FTK Lab with up to 16 Distributed Processing Engines (DPE) per Distributed Processing Manager (DPM). We recommend starting with 6-8 DPEs when you first implement FTK Lab.
For more information about FTK Lab configuration, reference the System Specification Guide.
Yes! FTK Lab can be configured behind your firewall for inter-agency review teams to work together on cases. And its web-based review infrastructure can also securely allow for outside investigators or attorneys from other jurisdictions and agencies to participate in the review process, regardless of their location.
FTK Lab can be easily deployed in a cloud environment like AWS or Azure to scale your infrastructure, control costs, and save on hardware. You can host FTK Lab in your own private cloud environment for full control over your hardware configuration, or host with a third party provider and simply bring your FTK Lab licenses with you and scale up or down as needed depending on case sizes. Another possible benefit is that a cloud setup can often be purchased out of an operating budget instead of a capital budget. Bottom line: many of our FTK Lab customers successfully use a cloud configuration and have achieved extraordinary processing speeds and cross-agency collaboration milestones.
FTK Lab’s roles and permissions can allow each user to access only the features and data that are relevant to their part of the investigation. Administrators can assign users to a specific case or set of data within a case. Users can even be restricted by feature, so only qualified users can access more advanced functions.
Dividing the evidence creates a more efficient and secure workflow, so you can bring in non-technical users without worrying about the data being compromised. With the web-based, true native review system, non-technical users (such as attorneys, HR personnel, outside experts, etc.) can be given case file access, regardless of where they’re located.
Yes, FTK Lab offers both the traditional Core View UI and the new Smart View interface for users of all skill levels. For example, newer or less technical users can work in the Smart View and collaborate with an investigator back in the lab who's still using Core View. They can work in the same case file together and both see each other’s changes because the case files are centralized and the interface is simply a personal preference for each user.
Create full-disk forensic images and process a wide range of data types from many sources, including Windows and Linux hard drives, CD’s and DVDs, thumb drives or other USB devices, network data and Internet storage, all in a centralized, secure database.
You can also optionally include FTK Central in your FTK Lab environment to add remote endpoint and cloud data source collection capabilities.
Talk with an Exterro FTK Lab expert about your current workflow.

Some cases produce such massive amounts of data that they overwhelm existing equipment. One European police agency was able to produce astounding processing and indexing results with their distributed setup of FTK Lab. The agency configured one Distributed Processing Manager (DPM) to manage 11 Distributed Processing Engines (DPEs), thus distributing the processing power across 11 pieces of hardware for lightning-fast results.
Learn How FTK Lab Can Power Your Large-Scale Forensic Investigations

Digital forensics units throughout the world are inundated with ever-growing caseloads and increasingly massive data sets. FTK Lab helps forensics labs gain control over their caseload by enabling examiners to work cases faster.

Learn about the entire family of Exterro FTK Digital Forensics solutions. No matter your investigatory challenge, there's an Exterro FTK product that can help you get to the relevant facts in your investigation faster.

Download this case study to learn how Exterro helped a European government agency shift to a remote forensic software solution.
Learn how to divide and conquer massive data sets with FTK Lab