Support Portal

Question What does the "Accumulate Results" option for "Index Search" accomplish? Understanding “Accumulate Results” The “Accumula...

Question How can I completely reindex a case in FTK/Lab/Enterprise?   Answer Please follow the steps below: In the case management window, right...

Problem You get "Unable to Open Evidence" when clicking on any evidence in FTK.   Resolution Open your case in FTK Go to Evidence >...

Question How do I change (or update) the path to my processed evidence?     Answer IMPORTANT: Changing the evidence path currently does not work for...

Question What is the significance of the numbers in a carved file's name?   Answer FTK assigns names like "Carved[xxxxx].jpg". The nu...

Question How do I configure Forensic Tools (FTK, Enterprise, LAB) to use Distributed Processing?   Answer Create a Service Account In order for D...

Question How can I create a Load File in FTK 5.6.4 and later?   Overview The ability to generate a Load File was added in FTK 5.6.4 as a Report format o...

Question How can I decrypt Dropbox in FTK?   Prerequisites Windows: Dropbox files (encrypted SQLite files found in "C:\Users\\AppData\Roami...

Problem Case Creation Fails in FTK 6.0.0   Resolution Reinstall FTK, ensuring "English" is chosen at the language selection screen   C...

Problem In trying to get FTK to create a PST from email items I'm finding, it will only spit out a folder full of files and folders.   Resolution ...