FTK Imager

FTK Imager is a tool commonly used to preview data and create forensic images of storage media.

It is often used when evidence needs to be preserved before deeper analysis in another forensic platform.

Use imaging carefully and document hashes, source media, destination media, and operator actions.