Choose Suitable Image Source In “Create Image” WindowĪ “Create Image” Window will show and permits us to select the suitable “Image Source” which in our case will be “F:\”Ħ. Choose Appropriate Drive In “Select Drive” WindowĬhoose the appropriate drive that you want to image in the “Select Drive” window.įor instance, the drive we wish to image will be “F:\ Suspect Drive”. In our tutorial, we will choose “Logical Drive” and proceed by clicking “Next”.Ĥ. Keep in mind that the proper drive type will depend on the circumstances. Select “Logical Drive” In “Select Source” Window We see that there are numerous options for creating images. In the FTK Imager program, click on “File”. Launch FTK Imager From Your Windows DesktopĪfter installation of FTK Imager, go to your Windows desktop and double-click on the shortcut icon labelled “AccessData FTK Imager”. Keep in mind that the free edition of FTK Imager solely permits local imaging.Ģ. The first step is to download and install the latest free FTK Imager software from AccessData’s official site. Download & Install Latest Version Of FTK Imager From AccessData’s Official Website
#Download Ftk Imager Lite Free how to
Our tutorial will show how to create a precise copy of a local hard drive that belongs to a suspect (“F:\ Suspect Drive”) which will ultimately assist digital forensic examiners in their digital forensic investigations.ġ. When the data storage device is not physically present, remote procurement is viable. When a disk image is acquired locally, it indicates that the data storage device such as a hard drive on a system is physically accessible. FTK Imager permits digital forensic professionals to create an image of a local hard drive.ĪccessData’s FTK Imager allows the examiner to create both local and remote images.