FTK Imager Pro brings together iOS advanced logical collection, Encryption Detection & Decryption, and Direct Decrypted Live Data—all in one lightweight tool designed for digital investigators, field agents, and forensic analysts.
Key Features
- iOS Advanced Logical Collection: Acquire photos, messages, app data, call logs, and more from iOS devices using an intuitive, fast collection process.
- Encryption Detection & Decryption: Detect encrypted images like BitLocker and prompt for credentials to decrypt them to view the data.
- Direct Decrypted- Live Data: Skip the delays of full disk imaging, instantly view or acquire live decrypted BitLocker data directly from the target device.
Ideal For
- Incident Response / DFIR Teams – Quickly assess compromised endpoints, decrypt evidence, and export only what’s relevant for rapid response.
- Law Enforcement & Digital Forensic Examiners – Preserve evidence defensibly with integrated decryption and preview capabilities.
- Corporate Security & HR Investigations – Collect and triage sensitive data efficiently and securely during internal investigations.
- eDiscovery / Legal Operations – Enable faster case processing by previewing and collecting only the data that matters most.
Free vs Pro Comparison:
|
Capability / Feature |
FTK Imager |
FTK Imager Pro |
|
Cost |
|
|
|
Create forensic images (E01, AFF, RAW) |
|
|
|
Preview files & folders from drives |
|
|
|
Export files & folders |
|
|
|
Hashing (MD5, SHA1, SHA256) |
|
|
|
Mount forensic images |
|
|
|
iOS Advanced Logical Collection |
|
|
|
Encryption Detection (Supports More than 10+ Encrypt) |
|
|
|
Decryption with Credential Prompt |
|
|
|
Direct Decrypted Live Data (no encrypted copy needed) |
|
|
|
Faster, Simplified Workflows, All-in-one & Saves Time |
|
|
For more details regarding FAQs, please see:
https://www.exterro.com/digital-forensics-software/ftk-imager-pro
