Adding Evidence to FTK, LAB, and Enterprise
Question How do I process and expand Cellebrite (UFDR) images in FTK? Answer When adding a Cellebrite image (UFDR) to your case, follow the step...
Wed, May 24, 2023 at 9:54 AM
Add / Remove Evidence is Greyed Out If you are unable to add or remove evidence from within your case because the option is grayed out, you should check th...
Wed, May 24, 2023 at 12:42 PM
Symptom: When trying to add evidence or start additional analysis processing does not get past preprocessing or queued. Resolution: Cancel any current j...
Thu, Sep 21, 2023 at 3:38 AM
Problem How do I completely kill a job in FTK? Resolution Click "Cancel" in the Progress Window to end the job If the job does not cancel ...
Wed, May 24, 2023 at 1:02 PM
Problem When running any EP job (processing, additional analysis, production, export, etc.) in a distributed processing environment, you receive the err...
Wed, May 24, 2023 at 1:07 PM
FTK now supports OS X System Information parsing and creates the following categories within the System Information tab when the processing option "Gen...
Wed, May 24, 2023 at 1:19 PM
TABLE OF CONTENTS Additional Multimedia Carvers Which Multimedia Carvers are included? How to add Custom Carvers in FTK? From the Case-List From withi...
Wed, May 24, 2023 at 1:24 PM
Problem During evidence ingestion or "Add Evidence", processing of a certain PST or NSF file consistently fails while other evidence processes wi...
Wed, May 24, 2023 at 1:31 PM
With the release of FTK/FTKC 7.5.2 (March 2022), changes have been made to increase indexing performance. With these changes, a number of file categories ha...
Wed, May 24, 2023 at 1:32 PM
Question Do we support 4K and 8K sector sizes? Answer Yes. Sector size should be automatically detected for most image formats, as it would be ...
Wed, May 24, 2023 at 12:51 PM