FTK no longer allow...
 
Notifications
Clear all

FTK no longer allowed??

25 Posts
18 Users
0 Reactions
1,532 Views
(@tootypegs)
Trusted Member
Joined: 18 years ago
Posts: 80
 

To carry this a bit further, EnCase is as stable as a drunk one-legged centipede whose wife has just left him for his brother.

I think its time you left 😯


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
 

What method was it that you used to recover the bookmarks?

I had FTK 1.81 crash repeatedly during a case I worked on. Twice, we had to re-create the index (which took hours). Fortunately the second time we figured out how to recover the bookmarks.

Very irritating, but we still got it done.


   
ReplyQuote
(@crosser)
Trusted Member
Joined: 20 years ago
Posts: 56
 

What sometimes happens is that a person makes a comment at a conference, or somewhere with an audience, and then that comment morphs into something like Godzilla. Just because one statement is made by one individual, it potentially misrepresents the whole department, and the tool in question. Before you know it, rhumors about the Dept of Intergalactic Justice demanding their money back from Access Data or Guidance are going around like Paris Hilton gossip.

Sooner or later it seems that every tool reveals its weakness in one form or another. Examiners on the other hand, reveal their own weaknesses with great success everyday. I think it's inevitable that, given the exercises that we put these tools through on a daily basis, we will see these tools crash or act unpredictably eventually.

Lee's comments in this thread were great - I'm trying to come up with a Sebastian Chabal-Smart Car-software-crashing comment but I'm having trouble finishing…


   
ReplyQuote
rjpear
(@rjpear)
Trusted Member
Joined: 19 years ago
Posts: 97
 

Wow… If this keeps up we can break out into a MAC vs. PC debate… !

Good Times..


   
ReplyQuote
CdtDelta
(@cdtdelta)
Estimable Member
Joined: 17 years ago
Posts: 134
 

No no no…vi versus Emacs…..


   
ReplyQuote
Page 3 / 3
Share: