Is the default (built-in) block size for FTK Imager 512 bytes?
I've been looking for a technical paper on the inter-workings of FTK Imager, but I don't seem to be able to find one. Anyone know if one exists?
The default block size for FTK Imager is 1500 MB. I usually change that to 1024 MB or 2048 MB as it is more commonly acceptable size.
I don't know if you will find a technical paper detailing how FTK Imager works - however, there is a good paper detailing tests performed by NIST & NIJ. https://
Dave Sannar, EnCE
Dave I think you're referring to the image fragment size. I don't see where you can specify a custom blocksize with the GUI interface. Thanks for the document link!
It only fragments images using S01 or E01, DD will not fragment. I usually do 2048 just because its easier to handle.