AccessData FTK Intermediate
The AccessData BootCamp – Intermediate three-day course provides the knowledge and skills necessary to install,
configure, and effectively use Forensic Toolkit (FTK), Password Recovery Tool Kit (PRTK) and Registry Viewer.
Module 1: Introduction
Module 2: FTK Imager 201
Module 3: Registry Viewer 201
Module 4: Case Setup
Module 5: Email Analysis
Module 6: Disk Analysis Features
Module 7: Advanced Processing Options
Module 8: Advanced Searching
Module 9: Advanced Filtering
This hands-on class is intended for intermediate users, particularly forensic professionals and law enforcement personnel, who use AccessData forensic software to examine, analyze, and classify digital evidence.
To obtain the maximum benefit from this class, you should meet the following requirements:
Able to understand course curriculum presented in English
Perform most operations on a personal computer
Have a intermediate knowledge of computer forensic investigations and acquisition procedures
Be familiar with the Microsoft Windows environment
Class Materials and Software
You will receive the associated materials prior to the course.
During this three-day, hands-on course, participants will perform the following tasks:
Install and configure FTK, FTK Imager, and Registry Viewer
Review Registry Viewer functions: also conduct advanced searching and produce registry summary reports
Conduct more detailed email analysis
Use advanced processing options of FTK such as: EID, OCR, PhotoDNA, Event Log analysis, and Volume
Increase abilities to conduct more advanced Index and Live searches
Create and use more complex filters
Learn to use the Visualization tool
Learn the basics of PRTK, including: custom profile creation, creation of custom dictionaries and the breaking of
The course includes multiple hands-on labs that allow students to apply what they have learned in the workshop.