Solve complex cases faster with FTK's brand new interface designed to lead investigators directly to key evidence.
Eliminate the hours spent manually digging for the data types you’re interested in. FTK 8.0 intelligently categorizes and displays data artifacts to help you pinpoint key evidence FASTER.
FTK’s intuitive new interface design makes it easier for both experienced investigators and non-technical users to navigate within the software, dramatically reducing the learning curve. Bypass irrelevant data and quickly locate important evidence like images, videos, messages, timelines, websites, passwords, and dark web activity. The intuitive new interface highlights them all in plain sight for easy review.
Effortlessly pivot through multimedia case evidence using FTK’s new Thumbnail View for images and video. Hover over each thumbnail to enlarge the image, then click to view the image properties and metadata. Easily isolate pictures of interest, such as those taken by a particular mobile device within a specified time frame.
Make your time spent in front of the computer screen more comfortable. Choose between light mode and NEW dark mode to reduce digital eye strain and improve concentration.
FTK 8.0 also provides more context around the data, making it easy for you to trace the path from where an image originated to where (and to whom) it was sent, effectively reconstructing the activity leading up to and following the creation of the image. See related images and messages that occurred around the same time that the image was created, displayed in a Mini Timeline View. For example, see phone calls made before the image was taken, then view SMS text activity showing to whom the picture was sent afterward.
Cull massive data sets to narrow the scope of your investigation. Instead of manually creating complex data filters, the FTK Filter Panel automatically categorizes and highlights the artifacts you typically look for first as you begin your review. FTK 8.0 neatly categorizes artifacts like mobile data, chat apps, emails, pictures, videos, and system summary files for quick and easy review.
This feature presents the most important data upfront, highlighting the anomalies and most relevant case evidence. Quickly identify a device user’s recently accessed files, connected USB devices, AirDrop activity, remote desktop sessions, dark web activity, downloads, CSAM URLs visited, Apple and Google Map activity, saved credit cards, saved passwords, and more!
Stop spending countless hours endlessly scrolling through an antiquated data grid! With FTK’s new visual Smart Grid, users of all skill levels can easily build complex compound filters to locate key evidence faster. The Smart rid view shows you every data point that is POSSIBLE to filter on. To build a filter, simply click on the metadata values in one or more columns that you want to filter on.
FTK’s new Super Timeline View creates a visual representation of case evidence by piecing together timestamps, logs, actions, and other artifacts in a single view. Reveal patterns in the evidence and pinpoint where to begin your analysis with this intuitive representation of complex data sets.
Use Super Timeline Comparison Mode to compare two different dates or devices side by side to identify anomalies, find correlations, and uncover overlaps in communication, movement, or shared contacts. Answer key questions like, “What did this person do differently on the day of the incident?” to paint a complete picture of what really happened.
Now you can leverage FTK’s processing engine for computer data and mobile data! FTK 8.0 supports native unprocessed UFD extractions from mobile devices provided by tools like Cellebrite, Oxygen, XRY or GrayKey. Process and parse mobile data directly in FTK for lightning-fast review.
With the fastest scalable processing engine on the market, FTK can cut through mobile evidence up to 15.7 times faster than tools like Magnet Axiom. And by processing and parsing both mobile and computer evidence in a single FTK database, investigators can speed through review and analysis by finding common connections across data sources.
Our new Multimedia Review reduces repeated exposure to sensitive content. Investigators can more quickly and accurately categorize CSAM images per Project Vic and CAID standards. Stack duplicates by hashes or photo DNA to reduce the number of images you need to look at, making it much easier to pinpoint the most important ones in your case. Blur or hide explicit images that have been viewed or tagged already, or choose to turn the sound off when viewing videos.
Automate manual workflows so you can focus on reviewing evidence and closing cases faster!
Eliminate time spent waiting for jobs to be completed and get cases to examiners in half the time by using FTK Connect to automate case creation, evidence processing, searching and labeling results, exporting data and more all without any user interaction.
With its dramatically simplified interface, users of all skills levels can create powerful time- and money-saving automations without complicated scripting.