If you are new to FTK, FTK Core is your suggested training. If you have experience with FTK or have taken FTK Core, FTK Pro Training may be a better fit.
Notes
In order to obtain the certificate of completion, students must review all videos and achieve the required passing score on all Knowledge Check questions. Once this has been achieved, a certificate of completion will be awarded directly to the student.
Students are free to re-watch the training which will stay in their learner account for a period of one year from the date of purchase.
Training cannot be transferred to another student once the class has been started. Certificates can only be awarded to the assigned student and cannot be transferred.
FTK Core is a suggested prerequisite to FTK Pro. FTK Pro assumes the student has experience using FTK or has taken FTK Core.
Unlimited access. Take your courses at your time and pace.
FTK Pro
FTK Pro On Demand is an advanced tool course, that will explore advanced use of processing profiles, the Known File Filter (KFF), data carving, and filtering. This course will guide students through various file header and footer artifacts, timestamps, and more.
In FTK Pro, students will take a deeper dive into locating and identifying artifacts using the FTK tools including training in Exterro’s new forensic review tool, FTK+. This course assumes that the student has taken FTK Core or has experience using the FTK tools.
FTK Pro Syllabus
01. Installation
- Downloading and Installation
- FTK Software Installation
- KFF Known File Filter Install
- License Manager and Code Meter Installation
02. CASE CREATION
- Creating Cases and Modifying Processing Profiles
- Configuring Evidence Processing Options
- Knowledge Check: Case Creation
03. Evidence Management
- Adding Evidence
- Creating Evidence Groups
- Configuring Time Zone Settings
- Creating Case and Database Backups and Archives
- Verifying Image Integrity
- Image Mounting
- Knowledge Check - Evidence Management
04. Interface
- Introduction to the Interface
- Evidence Tree Pane
- File List Pane
- File Content Pane
- Columns
- The Drop-down Menus
- The Tabs
- Labels
- Bookmarking
- Knowledge Check - Interface
05. Filters
- Introduction to Filtering
- Single Rule Filters
- Nested Filters
- Multi Rule Filters
- Compound Filters
- Managing, Saving, and Sharing Filters
- Using Filters for Analysis
- Persons of Interest Filters
- Tab Filters
- Knowledge Check - Filters
06. Searching
- Index Search Overview
- Configuring Index Searches
- Using Operators in Index Searches
- Optical Character Recognition
- Live Search Overview
- Searching with Filters
- Live Text Search
- Live Hex Search
- Live Pattern and Regular Expression Searches
- Live Search Versus Index Search
- Knowledge Check - Searching
07. Kff
- Creating Hash Lists Using FTK Tools
- Working with KFF Hash Sets and Groups
- Processing Evidence with KFF
- Uses for the Known File Filter (KFF)
- KFF Import Utility
- Knowledge Check - KFF
08. Carving
- Automated Carving
- Knowledge Check - Carving
09. Case Production
- Exporting Options
- Exporting to Image
- Exporting File List Information
- Reporting
- Knowledge check - Case Production
10. Artifact Analysis
- Timestamps
- Knowledge Check - Artifact Analysis
11. Visualization
- Email Visualization
- Heat Map Visualization
- Map Images with EXIF
- Knowledge Check - Visualization
12. FTK Core Training Manual
FTK Core
Updated for 2023, FTK Core On Demand providers users of FTK with all of the foundational learning required to perform investigations. The class provides video led learning so that the content can be absorbed flexibly without the need to spend time away from the office. The class features additional content including a full training manual and a series of knowledge check videos which enable students to self check their learning outcomes. This is a precursor to FTK Pro.
FTK Core Syllabus
01. Installation
- Downloading and Installation
- FTK Software Installation
- KFF Known File Filter Install
- License Manager and Code Meter Installation
02. CASE CREATION
- Creating Cases and Modifying Processing Profiles
- Configuring Evidence Processing Options
- Knowledge Check: Case Creation
03. Evidence Management
- Adding Evidence
- Creating Evidence Groups
- Configuring Time Zone Settings
- Creating Case and Database Backups and Archives
- Verifying Image Integrity
- Image Mounting
- Knowledge Check - Evidence Management
04. Interface
- Introduction to the Interface
- Evidence Tree Pane
- File List Pane
- File Content Pane
- Columns
- The Drop-down Menus
- The Tabs
- Labels
- Bookmarking
- Knowledge Check - Interface
05. Filters
- Introduction to Filtering
- Single Rule Filters
- Nested Filters
- Multi Rule Filters
- Compound Filters
- Managing, Saving, and Sharing Filters
- Using Filters for Analysis
- Persons of Interest Filters
- Tab Filters
- Knowledge Check - Filters
06. Searching
- Index Search Overview
- Configuring Index Searches
- Using Operators in Index Searches
- Optical Character Recognition
- Live Search Overview
- Searching with Filters
- Live Text Search
- Live Hex Search
- Live Pattern and Regular Expression Searches
- Live Search Versus Index Search
- Knowledge Check - Searching
07. Kff
- Creating Hash Lists Using FTK Tools
- Working with KFF Hash Sets and Groups
- Processing Evidence with KFF
- Uses for the Known File Filter (KFF)
- KFF Import Utility
- Knowledge Check - KFF
08. Carving
- Automated Carving
- Knowledge Check - Carving
09. Case Production
- Exporting Options
- Exporting to Image
- Exporting File List Information
- Reporting
- Knowledge check - Case Production
10. Artifact Analysis
- Timestamps
- Knowledge Check - Artifact Analysis
11. Visualization
- Email Visualization
- Heat Map Visualization
- Map Images with EXIF
- Knowledge Check - Visualization
12. FTK Core Training Manual
