FTK 2 - is it a new concept?
Monday, February 04, 2008 (22:31:28)

Posted by msve

One of the most important event at DFF Prague 2007 Meeting was the introduction of the FTK 2. Not because of sponsorship of DFF by AD, but because FTK 2 has really new conception. It is, as minimum as my opinion.
Why? I discussed at DFF coffee-break with Johan ten Houten,

that powerful database engine in the background of disk image analysis was our dream at the early beginning of our forensic experience (more than 20 years ago!).
I tried to build an analysis tool myselves, and I had a success! I have to say, that it was only for floppies (FAT12). But when you imagine, that my program was built using FoxPro, floppy disk image was read directly from Fox interface and sector by sector stored into the database (DBF file), after that FAT was analyzed and the file system was emulated using Fox 2 DOS interface, I am proud
And now, our dream seems to be the reality. I hope AD will repair imperfections we could seen and at the end of February relatively stable release will be ready for us.
As the first release of the new conception I suppose to use FTK very carefully, but I hope that FTK 2.2 (?) will be stable.
Lets us wait 19 of February, when FTK 2 will be distributed!