Skip to content
Triage Investiga

FTK Imager

FTK Imager

Exterro / AccessData • Windows / Command-Line (CLI) 3 0
Download Installer / Package
v

Release Notes / Changelog (v4.7.1)

20 Feb 2026

SHA-256 hashing speed optimizations for NVMe SSDs and Windows 11 23H2 memory dump support.

About & Primary Utility

FTK Imager is a widely-trusted, complimentary forensic data acquisition tool. It enables examiners to create sector-level disk images in E01, RAW/DD, or AFF formats while computing MD5 and SHA-1 hashes in real-time to preserve chain of custody.

Articles, Tips & Tricks (2)

Utility & Overview #1

FTK Imager Utility & Creating Digital Evidence Images (E01)

Primary roles of FTK Imager in Live Acquisition, RAM Capture, and Hash Integrity Verification.

Triage Investiga • Guide Read Article →
Tips & Tricks #2

Tips & Tricks: Live RAM Acquisition without Altering Swap Files

Technique for running portable FTK Imager Lite via write-blocked flash drives to maintain memory volatility.

Triage Investiga • Guide Read Article →

All Version Releases Total 2 Versions

Version Release Date Changelog Download
v4.7.1 LATEST
20 Feb 2026 SHA-256 hashing speed optimizations for NVMe SSDs and Windows 11 23H2 memory dump support. Download
v4.7.0
15 Nov 2025 E01 v2.0 image specification support and `--capture-mem-fast` CLI command line switch. Download