FTK Imager

Disk image browser + acquisition tool — open images, extract files, acquire memory, verify hashes.

Installation

# Windows: download FTK Imager from exterro.com/ftk-imager (free registration)
# Install .exe → launches as GUI

# CLI version (Windows + Linux)
# ftkimager.exe (Windows) / ftkimager (Linux) — same flags
# Download: https://accessdata.com/product-download

# Linux CLI: also available as part of some forensic distros (DEFT, REMnux)