With the release of FTK 7.6, Mobile images can be processed. However, tar-based images can cause the UI to lockup during review. The following steps will allow users to review any child files/folders without the UI locking up. This registry key is not added by default and should be added to any examiner machine.

  1. Open RegEdit.
  2. Navigate to Computer\HKEY_LOCAL_MACHINE\Software\AccessData\Products\Common.
  3. Right-click on Common.
  4. Click New > DWORD (32-Bit) Value.
  5. Enter TarFileCaching.
  6. Enter a value of 1.

With this registry key added, extracted tar files will not be stored in the temp directory; instead these files will be stored in the case folder.