With the release of FTK 7.6, Mobile images can be processed. However, tar-based images can cause the UI to lockup during review. The following steps will allow users to review any child files/folders without the UI locking up. This registry key is not added by default and should be added to any examiner machine.
- Open RegEdit.
- Navigate to Computer\HKEY_LOCAL_MACHINE\Software\AccessData\Products\Common.
- Right-click on Common.
- Click New > DWORD (32-Bit) Value.
- Enter TarFileCaching.
- Enter a value of 1.
With this registry key added, extracted tar files will not be stored in the temp directory; instead these files will be stored in the case folder.