Get evidence into the hands of investigators in record time!
Process mobile phone evidence up to 20 times faster.
Create workflow automations in just seconds.
Securely investigate your remote workforce.
Scale up for massive cases, heavy case volumes,
& large organizational footprints.
FTK now supports native extractions from mobile devices provided by tools like Cellebrite or Oxygen. Process and parse mobile data directly in FTK for lightning-fast review.
By processing and parsing both mobile and computer evidence in a single database, investigators can speed through review and analysis by finding common connections across data sources.
As a certified Grayshift Technology Alliances Partner, FTK can fully and accurately import and parse mobile iOS and Android extractions created by GrayKey.
Built for non-programmers, FTK Connect’s intuitive interface allows users to easily create automations for any case type with a drag-and-drop interface. Be instantly productive with minimal training. Automate tasks like evidence processing, case creation, searching and review.
FTK Connect can also instantly preserve electronic evidence upon detection of an intrusion. Automate collection from remote endpoints based on triggers from SOAR and SIEM solutions like Palo Alto Networks Cortex XSOAR.
FTK solutions can scale up to meet the advanced requirements of large labs, case sizes, and case volumes.
PostGres compatibility helps organizations of all sizes become processing powerhouses at an affordable cost.
Advanced SQL configurations for truly unlimited scalability and reliability:
Preview the contents of potentially compromised endpoints that are online but not connected to the VPN. View the endpoint’s folder structure, filter for specific file and data types, and view files of interest before performing a collection, all within a Zero Trust infrastructure.
Off-network live preview is an industry-exclusive feature of the FTK Suite and gives organizations peace-of-mind while managing a remote workforce.
View endpoint search results instantaneously with configurable indexing during a remote Live Preview connection.
When images are categorized as a CAID or Project Vic material match, they are automatically flagged and obscured in the thumbnail view to protect investigators from repeated viewing of explicit content
Support the chain of custody by attaching photos of evidence devices from multiple angles, including pictures of pre-existing damage and images of the device powered on and off.
Learn about the new advances available in version 7.6 of the FTK Suite, which offers lightning fast mobile processing and more!
Learn how you can take your digital forensics and incident response to the next level by connecting FTK to your cybersecurity platform with FTK Connect.