What is your experience with PRTK and Passware Forensic? I already own PRTK as a part of FTK, but since I use EnCase primarily, Passware's integration with EnCase is intriguing.
Or, are there other packages I should consider? I'm interested in support for a wide array of products, ease of use, and integration with EnCase and FTK. Which would you choose?
I like that Passware can use the GPU for accelleration of some types of jobs. I've always wondered why PRTK can't do GPU accelleration.
I have both and I very rarely use PRTK as it mostly supports older file types. Passware is frequently updated and they always add interesting features.
I have both PRTK and Passware forensic kit.
The only time I use PRTK is when I extract IE intelliforms.
In my opinion Passware is the winner. PRTK behaves strange sometimes and lacks of user configuration. I like when a software just works and PRTK does not (crashes, hangs, restarts computer).
//D
Between the two Passware. You might want to look into ElcomSoft as well.
PRTK is a pain in the a*s. Frequent issues with setups, the engine is not working. If it works, integrated with FTK it's a good product for those OS encrypted data such as EFS, NTUSER.DAT, etc. From a speed stanpoint, passware is much much more faster that PRTK (java based <- LOL)