Skip to content
Triage Investiga

FTK Imager

FTK Imager

Exterro / AccessData • Windows 202 134
Official Website Download Installer / Package
v

Release Notes / Changelog (v4.7.1)

20 Feb 2026

SHA-256 hashing speed optimizations for NVMe SSDs and Windows 11 23H2 memory dump support.

About & Primary Utility

FTK Imager is Exterro's free forensic acquisition tool that lets investigators create forensic images of disks, folders, or removable media, verify integrity via hashing, and preview file/email contents without opening the native application — making it one of the most widely used tools in digital forensic labs.

Articles, Tips & Tricks (2)

Utility & Overview #1

FTK Imager Utility & Creating Digital Evidence Images (E01)

Primary roles of FTK Imager in Live Acquisition, RAM Capture, and Hash Integrity Verification.

Triage Investiga • Guide Read Article →
Tips & Tricks #2

Tips & Tricks: Live RAM Acquisition without Altering Swap Files

Technique for running portable FTK Imager Lite via write-blocked flash drives to maintain memory volatility.

Triage Investiga • Guide Read Article →

All Version Releases Total 2 Versions

Version Release Date Changelog Download
v4.7.1 LATEST
20 Feb 2026 SHA-256 hashing speed optimizations for NVMe SSDs and Windows 11 23H2 memory dump support. Download
v4.7.0
15 Nov 2025 E01 v2.0 image specification support and `--capture-mem-fast` CLI command line switch. Download