AccessData FTK Interface Overview - Slideshow PDF
Document Details
Uploaded by EasyToUseScholarship2314
Coventry University
Tags
Summary
This PowerPoint presentation provides an overview of the AccessData FTK interface. It covers the key features such as tab layouts, viewing options, search tools, dockable panes, and functionalities for examining digital forensic data and evidence including file identification and system information.
Full Transcript
AccessData FTK Interface Overview Module Objectives Tabs Within FTK Viewing Options Hex Text Filtered Natural Dockable Panes Explore Tab Navigation through the evidence via directory structure Quickpicks Allows user...
AccessData FTK Interface Overview Module Objectives Tabs Within FTK Viewing Options Hex Text Filtered Natural Dockable Panes Explore Tab Navigation through the evidence via directory structure Quickpicks Allows user selectable focus Icon shows selected status Can be suspended via the Quickpicks suspend button located on the toolbar Overview Tab Evidence files organized by category File Identification Files are identified by header, not by extension Viewing Options Hex Text View View Natural View Filtered View Viewing File Properties File system and file metadata Hex Interpreter Interpretation of hex data – Must be highlighted on the Hex Tab from the File Content View Drive Free Space Free Space found on Overview Tab, under File Category Email Tab Email organized by type and viewable via content and attachment Graphic Tab Checked graphics can be used in reporting process Quickpicks can focus graphic content Case Graphics viewed via thumbnail and full size image Video Tab Thumbnails for quick video scrolling Video files processed for video thumbnails will be organized here Internet/Chat Tab Same content as on Overview Tab Expanded Internet/Chat data and Internet containers will be available here Bookmarks Tab Bookmark Comment File Comment Supplementary Files Selections Selection Comments Created Bookmarks, organized alphabetically, are viewed here Live Search Tab Search by: Text Pattern Hex Index Search Tab TR1 Expressions Query of the Text Index System Information Tab Limited system information artifacts extracted from full system partition images and organized for easy viewing and analysis Add New Tab The new tab will use the currently selected tab and duplicate it Tab will be named with the desired custom name Add New Tab The new tab will use the currently selected tab and duplicate it Tab filters make custom tabs most useful Dockable Panes Tabs have a default layout. Can be adjusted to any desired layout needed Dockable Panes To adjust the layout: grab the window header Move to desired location Hover over location tab Drop to re-dock the window Save/Reset/Lock Panes Tabs can be: Saved to current layout Restored to current saved layout Reset to AD default location Locked to prevent movement Module Review Tabs Within FTK Viewing Options Hex Text Filtered Natural Dockable Panes
