FTK Imager Purpose: To introduce some of the FTK Imager features which include some of the core functions related to acquiring case evidence. Application location: Virtual Computing Lab Preparation: Review user guide and lab video/slides (on Blackboard) Evidence file: Washer.E01 file (located in \\144.175.196.12\Forensic Data\Washer.E01) Questions to answer: Who was the examiner for this drive […]