List of supported identified and analysed file systems, supported hard disk image formats, CD and DVD formats and recognized and analysed whole disk encryption formats. List updated after FTK Suite 7.6 release.
Format | Extension | Disk Image | Optical Media Image | Logical File Archive |
SafeBack/SnapBack | 1 | x | ||
AccessData Logical Image | AD1 | x | x | |
Advanced Forensic Format | AFF | x | ||
The Advanced Forensics File format 4 | AFF4 | x | x | |
Apple File System | APFS | x | ||
Binary file format (Raw), Optical Binary | BIN | x | x | |
WinOnCD | C2D | x | ||
CloneCD | CCD | x | ||
Philips/OptImage | CD | x | ||
Compact Disc File System | CDFS | x | ||
DiskJuggler | CDI | x | ||
Roxio | CIF | x | ||
X-Ways | CTR | x | ||
IsoBuster | CUE | x | ||
Disk-At-Once | DAO | x | ||
Linux DD | DD, 001, IMG | x | x | |
Apple Disk Image Files | DMG | x | ||
Encase (physical) , Expert Witness by ASR Data | E01 | x | ||
Amazon Elastic File System | EFS | x | ||
EnCase Forensic Evidence Image Format | EX01 | x | ||
Extensible File Allocation Table | EXFAT | x | ||
Second Extended File System | EXT2FS | x | ||
Third Extended Filesystem | EXT3FS | x | ||
Fourth Extended Filesystem | EXT4FS | x | ||
File Allocation Table 12 | FAT12 | x | ||
File Allocation Table 16 | FAT16 | x | ||
File Allocation Table 32 | FAT32 | x | ||
Prassi CD Right | GCD | x | ||
Ghost Backup file by Norton (Raw - forensic images only) | GHO | x | ||
Prassi PrimoDVD | GI | x | ||
Hierarchical File System | HFS, HFS+ | x | ||
ICS (DVD Shrink) | I01 | x | ||
iCalendar | ICS | x | ||
Image Files | IMA | x | ||
Disc-Image-Datei, Raw IMG | IMG | x | x | |
ISO Image, Optical disc image | ISO | x | ||
Journaled File System (Image) | JFS | x | x | |
Encase Logical Image | L01, LX01 | x | x | |
LabVIEW Measurement format | LVM, LVM2 | x | ||
BDAV | M2TS | x | ||
Alcohol | MDS | x | ||
MS Virtual Hard Disk | MSVHD | x | ||
Nero (Image Files) | NRG | x | x | |
New Technology File System | NTFS | x | ||
Gear CD | P01 | x | ||
Pinnacle | PDI | x | ||
Plextools | PXI | x | ||
Raw Data Format | RAW | x | ||
Windows 8 and Server 2012 | REFS | x | ||
Reiser File System | REISERFS 3 | x | ||
SMART Image Files | S01 | x | x | |
JRiver Media Center Data Format | SACD | x | ||
Super Video CD | SVCD | x | ||
Track-At-Once | TAO | x | ||
Tarball | TAR | x | ||
Cellebrite | UFD, UFDR | x | ||
FreeBSD Unix File System Image | UFS | x | ||
Unix File Systems | UFS1, UFS2 | x | ||
Virtual CD | VC4 | x | ||
Video CD | VCD | x | ||
Virtual Box Images | VDI | x | ||
Virtual Hard Disk | VHD | x | ||
VMWare, Virtual Machine Disk | VMDK | x | ||
Veritas File System | VXFS | x | ||
64-bit, highly scalable file system | XFS | x | ||
XRY (MSAB) Extended XML with archive | ZIP | x | ||
YAFFS Image | YAFFS | x | ||
YAFFS 2 Images | YAFFS2 | x | ||
Zip | ZIP | x |
Recognized and Analysed Whole Disk Encryption Formats |
APFS Encrypted |
McAfee Drive Encryption |
Apple FileVault |
Microsoft Windows Bitlocker |
Apple FileVault 2 |
PGPDisk® |
Checkpoint / PointSec R73 7.4.5 |
SecureDoc WinMagic AES |
Checkpoint 7.6.150 with token challenge |
Symantec Endpoint Encryption (formerly Guardian Edge) |
Dell Encryption |
Symantec Drive Encryption (PGP WDE) 10.0 (only) |
Guardian Edge |
Utimaco Safeguard Easy |
McAfee Endpoint Encryption (Safeboot 5.x / 6.0) |
Utimaco SafeGuard Enterprise |