FTK Imager a Forensics Tools For MAC OS X
-
Updated
Jul 26, 2018
#
ftk-imager
Here are 31 public repositories matching this topic...
CLI Tools to open, extract and mount FTK Imager's AccessData AD1 forensic images on linux.
-
Updated
May 27, 2025 - C
This report was written for the Digital Forensics Analysis coursework, specifically the first assignment. In which, steps and screenshots for each investigation process are recorded.
incident-response partitioning digital-forensics file-recovery virtual-hardisk ftk-imager active-disk-editor
-
Updated
Jul 17, 2023
A tool written in AHK to automate FTK imager for collection purposes.
-
Updated
Oct 18, 2019 - AutoHotkey
Performed a forensic investigation on a digital evidence image file using Autopsy. Analyzed metadata, recovered deleted files, and documented findings.
-
Updated
Dec 4, 2025
Memory Forensics & Malware Investigation using FTK Imager, Volatility & Autopsy
-
Updated
Feb 13, 2025
Complete digital forensic investigation of the M57-Jean dataset with documented methodology, findings, and forensic report.
-
Updated
Jul 5, 2026
Digital Forensics & Incident Response Lab | CHFI | Evidence Analysis | Forensic Investigations
incident-response dfir cybersecurity ntfs digital-forensics forensic-analysis mft autopsy ftk-imager windows-forensics evidence-analysis file-system-forensics
-
Updated
Jun 27, 2026
A collection of digital forensics lab reports covering Linux artifact recovery, shell history analysis, bash script forensics, and incident reconstruction using tools like SleuthKit, Auditd, and command-line utilities.
cron incident-response steganalysis auditd digital-forensics e3 forensic-analysis shell-history sleuthkit mactime timeline-analysis ftk-imager mobile-forensics linux-forensics bash-artifacts
-
Updated
Jun 18, 2025
Practical forensic recovery cases involving MBR repair, GPT reconstruction, partition recovery, and file evidence validation using hex analysis and FTK Imager.
disk cybersecurity df ntfs mbr gpt digital-forensics file-recovery disk-analysis ftk-imager disk-recovery hex-analysis ecdfp
-
Updated
Mar 13, 2026
MFT-Recover is a file recovery tool for the Windows NTFS 3.1 file system, used since Windows XP through the latest Windows 11. The tool works by parsing Master File Table (MFT) entries and directly accessing the raw volume to retrieve the data of deleted files.
-
Updated
Sep 17, 2025 - C++
Run FTK Imager directly from a portable USB or WinFE environment to perform forensic imaging without installing software on the target system.
incident-response forensics dfir digital-forensics ftk-imager disk-imaging evidence-collection windows-forensics live-forensics digital-forensic-tool live-imaging winfe
-
Updated
Dec 31, 2025
Using FTK Imager to create and verify a forensic image of a USB drive.
-
Updated
Oct 8, 2025
A write-up about the CyberDefenders Lab Phishy
powershell mozilla-firefox meterpreter data-exfiltration c2 vba-macros oletools oledump ftk-imager db-browser-for-sqlite smishing browser-forensics maldoc cyberdefenders endpoint-forensics registry-explorer passwordfox phishy
-
Updated
Jun 25, 2026
CS6503 Digital Forensics
-
Updated
Jun 19, 2025
using FTK imager to extract data from disk
-
Updated
Nov 22, 2023
Digital forensics investigation report for a Linux insider threat lab using FTK Imager, Bash history, log analysis, and artifact correlation.
incident-response dfir digital-forensics blue-team ftk-imager cyberdefenders linux-forensics soc-analyst
-
Updated
May 11, 2026
Forensic imager with FTK Imager-compatible output — bit-for-bit E01/raw acquisition, targeted logical collection, read-back verification, resume. Pure Python 3.10+, stdlib only.
-
Updated
Aug 25, 2026 - Rust
Hands-on digital forensics investigations using FTK Imager, Autopsy, Magnet AXIOM, and Windows forensic artifacts.
-
Updated
Jul 2, 2026
Covert DD images to E01's using FTK Imager
-
Updated
Mar 14, 2019 - AutoHotkey
Improve this page
Add a description, image, and links to the ftk-imager topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the ftk-imager topic, visit your repo's landing page and select "manage topics."