Getting Started with FTK

Last edited: Jan 16, 16:06

FTK FTK Requires a valid license to work. In the lab we have a licensing server set up on the LAN that can issue licenses for a maximum 72 machines at any given time. That should be more than enough as we are usually running no more than 42 at the same time. 🐌FTK Starts Slowly even so if you are using it in a VM. After the double click it can seem like nothing happens for a good 30 seconds, so patience is definitely required. When you start FTK it will either start with a banner or it will complain about a “security device”. If you need the location of the security device, set 192.168.2.200 (the local licensing server) as the address. After this your instance should get a license and start up in another 30 seconds or so. If this does not work, try to ping 192.168.2.200 just to double check if the server is actually up. Once you get to the authenticate window the credentials should be admin admin If you are using your own laptop, you could theoretically plug in or use the lab WIFI. For remote licensing options please ask your Tutor.

https://github.coventry.ac.uk/pages/CUEH/5065CEM/w1rewind.html

https://www.sciencedirect.com/science/article/pii/B9780128045268000022?via=ihub

https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-86.pdf

https://www.sans.org/blog/?focus-area=digital-forensics

https://www.forensicfocus.com/articles/writing-dfir-reports-a-primer/

https://resources.infosecinstitute.com/topic/digital-forensics-models/