Skip to product information
1 of 2

If you are new to FTK, FTK Core is your suggested training. If you have experience with FTK or have taken FTK Core, FTK Pro Training may be a better fit. 

Notes

In order to obtain the certificate of completion, students must review all videos and achieve the required passing score on all Knowledge Check questions.  Once this has been achieved, a certificate of completion will be awarded directly to the student. 

Students are free to re-watch the training which will stay in their learner account for a period of one year from the date of purchase.  

Training cannot be transferred to another student once the class has been started. Certificates can only be awarded to the assigned student and cannot be transferred. 

FTK Core is a suggested prerequisite to FTK Pro. FTK Pro assumes the student has experience using FTK or has taken FTK Core.

Unlimited access. Take your courses at your time and pace.

FTK Pro

FTK Pro On Demand is an advanced tool course, that will explore advanced use of processing profiles, the Known File Filter (KFF), data carving, and filtering. This course will guide students through various file header and footer artifacts, timestamps, and more.

In FTK Pro, students will take a deeper dive into locating and identifying artifacts using the FTK tools including training in Exterro’s new forensic review tool, FTK+. This course assumes that the student has taken FTK Core or has experience using the FTK tools.

FTK Pro Syllabus

01. Installation

  • Downloading and Installation
  • FTK Software Installation
  • KFF Known File Filter Install
  • License Manager and Code Meter Installation

02. CASE CREATION

  • Creating Cases and Modifying Processing Profiles
  • Configuring Evidence Processing Options
  • Knowledge Check: Case Creation

03. Evidence Management

  • Adding Evidence
  • Creating Evidence Groups
  • Configuring Time Zone Settings
  • Creating Case and Database Backups and Archives
  • Verifying Image Integrity
  • Image Mounting
  • Knowledge Check - Evidence Management

04. Interface

  • Introduction to the Interface
  • Evidence Tree Pane
  • File List Pane
  • File Content Pane
  • Columns
  • The Drop-down Menus
  • The Tabs
  • Labels
  • Bookmarking
  • Knowledge Check - Interface

05. Filters

  • Introduction to Filtering
  • Single Rule Filters
  • Nested Filters
  • Multi Rule Filters
  • Compound Filters
  • Managing, Saving, and Sharing Filters
  • Using Filters for Analysis
  • Persons of Interest Filters
  • Tab Filters
  • Knowledge Check - Filters

06. Searching

  • Index Search Overview
  • Configuring Index Searches
  • Using Operators in Index Searches
  • Optical Character Recognition
  • Live Search Overview
  • Searching with Filters
  • Live Text Search
  • Live Hex Search
  • Live Pattern and Regular Expression Searches
  • Live Search Versus Index Search
  • Knowledge Check - Searching

07. Kff

  • Creating Hash Lists Using FTK Tools
  • Working with KFF Hash Sets and Groups
  • Processing Evidence with KFF
  • Uses for the Known File Filter (KFF)
  • KFF Import Utility
  • Knowledge Check - KFF

08. Carving

  • Automated Carving
  • Knowledge Check - Carving

09. Case Production

  • Exporting Options
  • Exporting to Image
  • Exporting File List Information
  • Reporting
  • Knowledge check - Case Production

10. Artifact Analysis

  • Timestamps
  • Knowledge Check - Artifact Analysis

11. Visualization

  • Email Visualization
  • Heat Map Visualization
  • Map Images with EXIF
  • Knowledge Check - Visualization

12. FTK Core Training Manual

  • FTK Core Training Manual

FTK Core

Updated for 2023, FTK Core On Demand providers users of FTK with all of the foundational learning required to perform investigations.  The class provides video led learning so that the content can be absorbed flexibly without the need to spend time away from the office.  The class features additional content including a full training manual and a series of knowledge check videos which enable students to self check their learning outcomes. This is a precursor to FTK Pro.

 

FTK Core Syllabus

01. Installation

  • Downloading and Installation
  • FTK Software Installation
  • KFF Known File Filter Install
  • License Manager and Code Meter Installation

02. CASE CREATION

  • Creating Cases and Modifying Processing Profiles
  • Configuring Evidence Processing Options
  • Knowledge Check: Case Creation

03. Evidence Management

  • Adding Evidence
  • Creating Evidence Groups
  • Configuring Time Zone Settings
  • Creating Case and Database Backups and Archives
  • Verifying Image Integrity
  • Image Mounting
  • Knowledge Check - Evidence Management

04. Interface

  • Introduction to the Interface
  • Evidence Tree Pane
  • File List Pane
  • File Content Pane
  • Columns
  • The Drop-down Menus
  • The Tabs
  • Labels
  • Bookmarking
  • Knowledge Check - Interface

05. Filters

  • Introduction to Filtering
  • Single Rule Filters
  • Nested Filters
  • Multi Rule Filters
  • Compound Filters
  • Managing, Saving, and Sharing Filters
  • Using Filters for Analysis
  • Persons of Interest Filters
  • Tab Filters
  • Knowledge Check - Filters

06. Searching

  • Index Search Overview
  • Configuring Index Searches
  • Using Operators in Index Searches
  • Optical Character Recognition
  • Live Search Overview
  • Searching with Filters
  • Live Text Search
  • Live Hex Search
  • Live Pattern and Regular Expression Searches
  • Live Search Versus Index Search
  • Knowledge Check - Searching

07. Kff

  • Creating Hash Lists Using FTK Tools
  • Working with KFF Hash Sets and Groups
  • Processing Evidence with KFF
  • Uses for the Known File Filter (KFF)
  • KFF Import Utility
  • Knowledge Check - KFF

08. Carving

  • Automated Carving
  • Knowledge Check - Carving

09. Case Production

  • Exporting Options
  • Exporting to Image
  • Exporting File List Information
  • Reporting
  • Knowledge check - Case Production

10. Artifact Analysis

  • Timestamps
  • Knowledge Check - Artifact Analysis

11. Visualization

  • Email Visualization
  • Heat Map Visualization
  • Map Images with EXIF
  • Knowledge Check - Visualization

12. FTK Core Training Manual

  • FTK Core Training Manual

Exterro

FTK On-Demand Training Courses

FTK On-Demand Training Courses

Regular price $3,000.00 USD
Regular price Sale price $3,000.00 USD
Sale Sold out
Shipping calculated at checkout.
Course Option

What's Included

Within 2-3 business days of purchase, a link will be provided to the purchaser to access training.

View full details