FTK Imager是一个简单但简洁的工具。 它将硬盘映像保存在一个文件中或分段中,稍后可能会对其进行重建。 在关闭文件之前,它将计算MD5哈希值并确认数据的完整性。 为Mac OSX安装FTK Imager git clone git@github.com:MrMugiwara/FTK-imager-OSX.git cd FTK-imager-OSX chmod +x ftkimager ./ftkimager --help ...
Export your data into a portable case for offline review by a detective, analyst, attorney or outside reviewer. Any labels and bookmarks created by the reviewers are synced back to the original case. "FTK is the only tool you need to process and parse ALL of your digital evidence – mobil...