I've heard that FTK is currently under review…apparently evidence generated by the software is no longer permissible in court???
Is there any weight to this rumor or is it just hearsay?
Tom
Where may I ask did you get that info? Who or what is your source?
I doubt this is true.
I am under the impression (please let me know if I am very wrong) that the way software is used, documented, is the process repeatable etc, is more important than the actual software used.
Continuity of evidence, write blockers etc are also important.
No software is perfect.
I've missed quoted, apologies. A lecturer at uni says that FTK is under review by some police forces due to it crashing half way through cases. I just can't find anything to back this up…
roll
What you are saying now is rather different. This is an investigators preference, rather than a court ruling.
I am sure every software package has crashed at some time. If the package didn't, then I am sure Windows/Linux did. One problem with forensic investigation, is that there is no control over the data being 'thrown' at the investigation package.
Some people love Windows, others hate it. Some love PCs, some love Macs. Does your lecturer have a 'binary' view on certain packages?
Some versions of FTK have been known to be a little flakey at times. I'm not aware of that being detrimental in court though. Particularly, as already mentioned, when the process has been fully documented and diviations can be justified or explained.
A good investigator won't limit themselves to just one package or method either. So should FTK flake out, there is a back up option. There of course many other reasons for why multiple packages are used.
I've heard that FTK is currently under review…apparently evidence generated by the software is no longer permissible in court???
Is there any weight to this rumor or is it just hearsay?
Tom
UK courts don't rule specifically on what software we can or can't use. What exactly did the University of Derby lecturer say?
If FTK is under review by certain forces then SURELY EnCase is too as that crashes more than a drunk 5 year old, texting on his phone, while driving a Lotus Diablo.
If FTK is under review by certain forces then SURELY EnCase is too as that crashes more than a drunk 5 year old, texting on his phone, while driving a Lotus Diablo.
Would that be a Lamborghini Diablo?
;0)