PTK Forensics

{{Multiple issues|

{{more citations needed|date=June 2017}}

{{notability|Products|date=June 2017}}

}}

{{Infobox software

| logo =

| screenshot =

| caption = PTK Forensics

| collapsible =

| author = DFLabs Inc

| developer = DFLabs Inc

| released =

| discontinued = yes

| latest release version = version 2.0 (Jan 2009)

| latest release date =

| latest preview version =

| latest preview date =

| programming language =

| operating system =

| platform = LAMP

| size =

| language = JavaScript, PHP, Perl

| genre = Digital forensics

| license = Shareware/Commercial

| website = http://ptk.dflabs.com/

}}

PTK Forensics (PTK) was a non-free, commercial GUI for old versions of the digital forensics tool The Sleuth Kit (TSK). It also includes a number of other software modules for investigating digital media. The software is not developed anymore.

PTK runs as a GUI interface for The Sleuth Kit, acquiring and indexing digital media for investigation. Indexes are stored in an SQL database for searching as part of a digital investigation. PTK calculates a hash signature (using SHA-1 and MD5) for acquired media for verification and consistency purposes.

References

{{Reflist|refs=

  • [https://blogs.sans.org/computer-forensics/2009/11/30/ptk-hash-set-manager/ SANS Institute]

}}