Media Categorization is a method to identify the delicate content and help reviewers work easily and safely with sensitive images.


Step 1: Make sure KFF/Cassandra is installed and connected to FTK


Step 2: Enable Media Category on a global level

  • Open FTK Central > Settings > System Management
  • Under Case defaults select the media categorization region

  • Keep in mind that once the region has been selected it is not possible to change it (Please contact support if you require it to be changed, since it requires a modification in the database)
  • If you define the UK region you can only use the FTK Lab to import the necessary file later on.


Step 3: Download the known hash sets with the defined categories in .json format

  • Source 1- Project VIC only available for law enforcement
  • Source 2 - Child Abuse Image Database (CAID) is available to everyone to download
    • The .zip file contains several .json files for different file types e.g. AVI,WAV,MOV,MPG etc.
    • Save the .json files on your drive.


Step 4: Import the appropriate hash sets using KFF

  • Option 1: KFF Import Utility



  • Option 2: FTK Lab/Enterprise. From the main menu, select Manage > KFF and click on Import to add the json file to an existing KFF group.


Step 5: Process the evidence using the KFF option

  • Option 1: Do the KFF processing at the very beginning when creating the case

  • Option 2: Do the KFF processing as an additional analysis after the case has already been created.
    Important: In both cases make sure you select the following has been selected:
    - MD5 and SHA1 Hashes 
    - KFF - Project VIC. 

    Note: It is recommended to also select Create Thumbnails for Graphics in order to make use of the pixelation. The color coding of the individual pictures works only when Thumbnail View has been selected within the case.


Step 6: Initiate Media Category on a per-case level

  • Open FTK Central
  • Go to the Case List
  • Click on the three dots on a specific case (on the right end) and select Initiate Media Category then you will see the default Media Categories being loaded

  • Select Merge KFF Categories
  • Save the changes


Step 7: Check the results

  • Open FTK Central
  • Go to the Case List
  • Select your case
  • Go to Enter Review
  • In the Thumbnail view, select checkbox Pixelate Categorized Images


  • The different categories should be framed in different colors based on the category code
  • Media Categorization automatically created new bookmarks
  • Note: A user can use bookmarks to mark items manually as well using the Media Categorization shortcuts