FTK

FTK is no longer supported in the MSSI lab. This article is for historical purposes only.

Switches are located near workstations in the MSSI Lab that allow access to the FTK systems.

Forensics Toolkit or FTK is a filesystem forensics tool by AccessData used as part of the EN.650.656 Computer Forensics and EN.650.757 Advanced Computer Forensics courses.

ISI maintains an academic network access license for FTK that allows up to 30 workstations use of the FTK software at one time. This allows the FTK software to be installed on any number of workstations.

FTK Workstations

The MSSI Lab has several FTK workstations set up alongside the MSSI General-Use Workstations. These systems are typically underneath the desks and can be accessed using the KVM switch (see image above) below the monitor of the nearest workstation.

Using Your Own Computer

If you'd like to install FTK on your own laptop or virtual machine, you can do so using the software located in the Forensics folder on the Shared Drive. When the system asks you for licensing information, you will need to point it to dibatag.mssi-lab.isi.jhu.edu. These licenses will only work within the MSSI Lab Network.