Containerizing .dat files for efficient disk management

When processing .UFDR files and running System Summary, FTK stores some non-containerized data which results in high diskspace usage. The solution below allows users to toggle whether or not this data is containerized by default.

 

  1. Open RegEdit.
  2. Navigate to Computer\HKEY_LOCAL_MACHINE\Software\AccessData\Products\Common.

Graphical user interface, text, application Description automatically generated

  1. Right-click on Common.
  2. Locate CompressNativeStreams.
  3. Change the value to 1.
  4. Alternatively, if this key does not exist:
    1. Click New > DWORD (32-Bit) Value.
    2. Enter CompressNativeStreams.
    3. Enter a value of 1.