
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit

| Fact | Arkime | Exterro FTK Imager |
|---|---|---|
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | FTK Imager is a forensic imaging and preview tool for acquiring and preserving digital evidence. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
FTK Imager suits incident response and DFIR teams, law enforcement, forensic examiners, and corporate security or HR investigators who need to acquire and inspect digital evidence.