1) Launch FTK Imager

2) Select File > Add Evidence Item

3) Select "Image File" and proceed to add the image

4) Under the "Evidence Tree", right-click your image and select Verify Drive/Image

5) Compare the hash value calculated to the known hash value

6) Optional: To output the image verification hashes to a text file, follow the steps below.

6a) Create a text file in the same location as the image.

The text file's filename prefix should match the name of the first segment of the image, and the text file's extension should be "txt."

E.g. if the first image segment is named "mantooth.e01", then the text file should be named:


6b) Repeat step 4 above.