Does Mr Cyberguy have anything negative to say about FTK3? I am sure we are all for a balanced view of things. No such thing (IMHO), as the perfect forensic software application.
LOL… The master post was sponsored by… Access Data ..for all your forensics needs… and by "The coalition of "Anything other than EnCase"…
We now get back to your non sponsored posts…
I'll try it out as I have belief that the good old days can come back. Thanks for the heads up.
The Good old days never left.. Still working in 1.8x and using Imager and the Registry viewer…1.X flavors… Still going strong.. 😉
As my 2.0 still sits in it's case ……
but the raw hex view offered by FTK had its own internal html tags contained within it.
Yes that is the one.
H
I'm no lawyer but such posts as referred to could constitute misrepresentation under the Sale of Goods Act 1979 (as amended).
Anyway let's be fair, I'm sure the new posters concerned can clear up any doubt as to whether they have any financial interest in the product they recommend.
I agree with you Harryparsonage…. pretty suspicious that Mr. Cyberguy hasn't been able to give a response…Maybe it's because he's too busy trying to reinstall the oracle database..
Fab4, were you able to get a good install of FTK3.0?
Fab4, were you able to get a good install of FTK3.0?
No - I'm the type of guy that doesn't consider adopting new software until it's been out and about for a few months. I will test v3.0 obviously at some point but my time is bombed out currently.
With the release of FTK3, I am running it on a test bed before I deploy it into general use in our lab (as per or standard SOP's), and to date have had no problems with FTK 3. I am running some old cases on it to test it and so far it is significantly faster and more stable than 2.x (which I actually never approved for lab use). I still have some more testing to do, but so far it seems promising.
FYI I am running it on an i7 machine, 16Gb RAM, 2 TB HDD, on Vista 64.
I dont really understand the obsession with whether a product is 10% faster etc.
Personally I'm much more interested in how it parses the data, presents the data in the interface, and reports it. And possibly more importantly, how reliably it does so (both in terms of not crashing, and producing accurate consistent results). Most of the lengthier processes i'll end up overnighting anyway, so its problems with the above that cause many more headaches in the long run.
(You can take that as a dig at EnCase/FTK/etc as you see fit 😉 )
Rich
Sorry for being a suspicious type, but this rave revue comes from someone who has been on this board for just 2 months. As much as I love and still use FTK 1.8, FTK 2.0 was completely unusable. In my opinion FTK 2.0 has fundamental design flaws, not just implementation bugs, and will require miraculous improvement in order to even equal FTK 1.8 (at several times higher cost). I need to hear a review from someone who's been on this board for a while in order to give it any credence.