Support Portal

Problem I have files in my case showing no p-size.      Cause p-size (or physical size) is only for files that physically, alone, resided on the o...

Question FTK 6.0.0 has some new processing profiles. What is the purpose of those new processing profiles?   Answer   Here is a description of eac...

Question How do I increase the level of debug logging in FTK? Note: This is separate from Capture Processing Engine Debug/Error Logs   Answer Close FT...

Question What is used to populate System Information in FTK?   Answer System Information pulls the following data from their associated locations: Main...

Question What's the difference between Archive, Archive and Detach, and Backup?   Answer Archive: Backs the database data up into the existin...

Question How do I decrypt Credant data in FTK/AD Lab/AD Enterprise?   Supported Versions Credant 5.4-7.7   Prerequisites Enable the Forensic A...

Problem Using Windows 8.1 and Windows 10, I cannot navigate to mapped drives when using browse dialogs found in FTK and FTK Imager. E.g. Browse dialogs suc...

Problem Files decrypted in FTK have the Category "Newly-decrypted files" instead of being properly categorized.  This may result in the files no...

Problem When processing evidence with video thumbnail creation enabled in processing options, no video thumbnails are created.   Resolution First, delet...

Question What is the significance of the numbers in a carved file's name?   Answer A carved file, by definition, is a file that is not recorded ...