
Exterro FTK Imager
6.7#8 in digital forensics softwareFrom $499 a yearFree planWebWindows
Visit
| Fact | Exterro FTK Imager | Plaso |
|---|---|---|
| Purpose | FTK Imager is a forensic imaging and preview tool for acquiring and preserving digital evidence. | Plaso is a Python-based engine used by tools to create super timelines or more targeted timelines for digital forensic analysis. |
FTK Imager suits incident response and DFIR teams, law enforcement, forensic examiners, and corporate security or HR investigators who need to acquire and inspect digital evidence.
Plaso suits digital forensic practitioners who need to collect and analyze timelines from files, devices, logs, or storage images. Its parser and plug-in framework may also suit users extending forensic workflows.