EnCase and FTK

[Esqulax]

Hey Guys,
Browsing the forums, i keep seeing references to EnCase and FTK as forensic software.
Being the newbie that i am, would anyone care to expand on what they are, what they do, how they do it, and anything else interesting about them.
Thanks

[Disklabs]

Esqulax,

You ask a very important question, what is Encase and FTK?

Basically, Encase is software by a company called Guidance Software. It is the most common software used in the computer forensics world by a long shot.

FTK, (or Forensic Tool Kit), is by Access Data and is number two in the most popular forensics software. FTK is much simpler to use than Encase.
FTK is part of a suite called UTK, (Ultimate Tool Kit), which includes PRTK, (Password Recovery Tool Kit, DNA, (Distributed Network Attack), Registry Viewer and of course FTK itself.

Was that easy enough?

Regards,

Simon
PS Welcom to the board!

[Esqulax]

So, If im doing a course it would be advantageous to request experience in at least one of these packages.
What is your personal preferance with these?

[Minesh]

Yes, it would put you way ahead of other candidates for a job, certainly.
However, not many university courses do offer training in these, it appears.

What sort of course do you mean? A university course? If you're in the UK, check out the following thread, which may interest you:
http://computer-forensics.co.uk/computer-forensics-forums/showthread.php?t=139

Edit, just read your other thread, so you're in the UK and already have a degree, so probably are looking at MSc only.


Kind Regards,

Minesh