Problem

You get "Unable to Open Evidence" when clicking on any evidence in FTK.

 

Resolution

  1. Open your case in FTK
  2. Go to Evidence > Add/Remove
  3. On the left, highlight the evidence image in question
  4. On the right you can see the stored path to the selected image
  5. Correct the path to point to the image's current location
  6. Click OK
  7. If FTK is still not linking to the evidence, close and reopen FTK.

 

Cause

This typically occurs when the evidence has been moved or the drive letter to the evidence has changed.

 

Note: This may not work with all live evidence.  If the state or location of live evidence changes, you will need to re-process the evidence.