FTK, Enterprise, and Lab User Interface

FTK Imager Memory Dump collection crashes or causes blue screen
Problem When trying to use FTK Imager to collect Memory, Imager crashes or the computer "blue screens" and must be rebooted.   Resolution ...
Sun, Sep 26, 2021 at 9:57 AM
FTK "Load File" Report Option Grayed-Out
Problem: When selecting File > Report, and clicking "OK," the format for "Load File" is grayed-out and not selectable. Solution: ...
Sun, Sep 26, 2021 at 9:57 AM
Person Of Interest - Quick Start Guide
Description: The Person of Interest is a feature designed to show connections between Phone evidence and Email evidence. The solution will scrape your ema...
Sun, Sep 26, 2021 at 9:57 AM
Change Case Folder Path
Question How do I change (or update) the path to my existing case folders?     Answer IMPORTANT: Changing the case folder path currently does not wo...
Sun, Sep 26, 2021 at 9:58 AM
Create a Case Administrator or Case Reviewer in AD Enterprise
Question How do I give an AD Enterprise user Case Administrator or Case Reviewer rights, so they only have access to specific cases?   Answer Crea...
Sun, Sep 26, 2021 at 9:59 AM
Error "License Has Been Revoked" and FTK GUI Closes
Issue: Error "License Has Been Revoked" appears and FTK GUI Closes.   Symptom: When processing within a case, FTK presents an error messag...
Sun, Sep 26, 2021 at 10:02 AM
FTK - Filter/search bulk item numbers
Question How can I take a very long list of item numbers and filter on them or search for them?   Answer You can use the included python script to do th...
Wed, Oct 27, 2021 at 11:59 AM
What is the significance of the numbers in a carved file's name?
Question What is the significance of the numbers in a carved file's name?   Answer A carved file, by definition, is a file that is not recorded...
Sun, Sep 26, 2021 at 10:03 AM
Video thumbnails will not generate
Problem When processing evidence with video thumbnail creation enabled in processing options, no video thumbnails are created.   Resolution First, d...
Sun, Sep 26, 2021 at 10:03 AM
Decrypted files are categorized "Newly-decrypted files"
Problem Files decrypted in FTK have the Category "Newly-decrypted files" instead of being properly categorized.  This may result in the files no...
Sun, Sep 26, 2021 at 10:04 AM