Hi,
Could you give the group some data to support this claim please.
Just curious why anyone would use FTK imager to take disc images when they have access to Xways which is about 10 times faster and more reliable at imaging…
Just curious why anyone would use FTK imager to take disc images when they have access to Xways which is about 10 times faster and more reliable at imaging…
Xways is about 10 times faster than FTK imager at imaging??? Are you kidding me?
Personal experience not testing.
Real world experience using EnCase, FTKimager, Xways, TIM and found Xways to be consistently the fastest by a massive margin.
Most recent example, using crappy laptop to image a 500gb hard drive with FTK imager took 15 hours, same laptop same size hard drive, with xways just under 3 hours.
With results like that I'm hardly going to go back again and again.
I'm gathering you've had different experiences judging by your comments….love to hear them. Am always willing to be proven wrong and learn something new. The last time I used FTK imager was about 6 months ago so has their been significant improvements since then?
Edit Have just grabbed the latest FTK imager and will run that against XWF32, XWF64 and TIM for imaging times. Am more than happy to be proven wrong…..but obviously hope I'm not D
Okay test complete.
Imaging an old 36GB Raptor WD drive which has not much data on it over 3 partitions.
Xways Forensics 32bit - 11mins 58seconds
Xways Forensics 64bit - 11mins 47seconds
TIM (Tableau) - 10mins 42seconds
drum roll D
FTK imager 3.1 - 12mins 52seconds.
Hardly earth shattering or conclusive, but using same everything and only changing the tool FTK was the slowest by a decent margin. I think this is around 8% slower than XWF, so if we say that was a 2TB hard drive then the time difference becomes a bit more significant, maybe around an hour assuming all the variables remain the same.
I will freely admit that FTK 3.1 seems faster than 3.0, and significantly so, enough that I'll put it back into the imaging rotation. Now I just have to run this test again with my Tableau TD2 to see how it compares.