FTK® Imager

Preview and Image Data for Free

Need a quick way to see what data is on a computer hard drive?

Join the thousands of forensic professionals worldwide who trust FTK Imager as their go-to solution for the first step in investigating an electronic device.

FULL DISK IMAGING CAPABILITIES

Preview and image hard drives from Windows and Linux computers, CDs, DVDs, thumb drives, and other USB devices for free with FTK Imager! Acquire electronic evidence in a forensically sound manner by creating copies of computer data without making any changes to the original evidence.

CUSTOM CONTENT IMAGES

Create a custom content image of your dataset by selecting only the data you want in order to reduce the size of your dataset and make your investigation more efficient yet still forensically sound. Manually add files or directories to your custom image or use wildcard search criteria to select targeted files.

FORENSIC IMAGE MOUNTING

Mount an image for a read-only view that leverages Windows® File Explorer to see the content of the image exactly as the user saw it on the original drive. See and recover files that have been deleted from the Recycle Bin, but have not yet been overwritten on the drive.

HASH REPORTS

Generate hash reports for regular files and disk images (including files inside disk images) that you can later use as a benchmark to prove the integrity of your case evidence. Use either of the two leading hash functions: Message Digest 5 (MD5) and Secure Hash Algorithm (SHA-1).

PREVIEW DATA

Preview the contents of forensic images stored on your local machine or on a network drive. This feature works with files and folders on local hard drives, network drives, CDs and DVDs, thumb drives or other USB devices.

COMPATIBLE EXPORT FILES

FTK Imager can write and read all of the most common forensic image formats, making it easy to continue your forensic analysis and review in whatever tool you use in your workflow, including the full-featured FTK Forensic Toolkit.

RAM CAPTURE

FTK Imager allows you to perform memory capture or registry capture on a live device, to recover passwords or other data stored in memory on the active device. For large-scale remote volatile data capture and robust memory analysis capabilities, upgrade to a full-featured version of FTK, including FTK® Enterprise or FTK® Central.

Get Started with

FTK® Imager

Download FTK® Imager

What Customers Are Saying

I’ve used FTK Imager for nearly 20 years. Imager has always been a  dependable imaging tool but the recent improvements in speed are really outstanding. We've seen the time to image a device cut in half! Great work!
Tom Angle
Forensic Consultant, Law Enforcement

Do Even More with FTK® Forensic Toolkit

Upgrade to the Gold Standard in Digital Forensics

While FTK Imager excels at electronic device imaging, its analysis and review capabilities are limited. For more than 15 years, digital forensics professionals have counted on the full-featured FTK Forensic Toolkit to complete forensically sound investigations.

Think You Know FTK:

Still the most trusted digital forensics tool on the planet.

FTK Feature Focus - Episode 49 - Tracking User Activity Remotely with FTK Enterprise:

FTK 7.6 has been released! With every release are new features, enhancements, changes, bug fixes and so on. Check out this video for a quick update on what is new in FTK 7.6.

FTK Feature Focus - Episode 48 - Filtered Collections while Previewing with FTK Enterprise:

This episode takes a look at collecting files that comply with any pre-built filter within FTK. This allows you to gather evidence for specific case types, workflows, and processing options.

FTK Feature Focus - Episode 45 - Optical Character Recognition (OCR):

This FTK Feature Focus covers Optical Character Recognition (OCR) within Forensic Toolkit. OCR is available in each version of FTK (LAB, Enterprise, and Central) to convert text within graphics into searchable texts.

FTK Feature Focus - Episode 34 - Portable Case:

In this episode we return to the Portable Case feature in FTK. This week we will take a look at a config feature for version 7.5.1. If you have noticed a change in how Portable Case exports files, this video is for you!

FTK Feature Focus - Episode 33 - Exporting File List Info:

No matter how good your analysis is, if you can't report on the data, it's wasted time. Here, we take a look at one way to report out information related to the files important to your case.

FTK Feature Focus - Episode 30 - AI in FTK 7.5.1:

FTK 7.5.1 added AI assisted object recognition to videos. This means that users can run a processing option to find everything from airplanes to guns, nudity to vehicles within video files. Fast and easy to use.