Search This Blog

Friday, July 13, 2018

FTKimager

FTKimager is a forensic imaging software which can scan disks and make copy of it in EnCase , SMART as well as in raw (dd) format.

Syntax :
ftkimager source [destination] [options]
Example :
ftkimager /dev/sda ~/img --e01 --outpass 1337 
Above command will create image of sda encrypted with password 1337 in EnCase format and save it as img.