There are various possible uses for the visualization tool, so we will go through them one at a time:
- Firstly, you can change the theme of FTK should you wish to do so. You can do this by going to CaseManager|Tools|Preferences in FTK, which will then open up a box which lists several options. These correspond closely to the options that used to be available in older versions of Windows, so it should be familiar to many.
- One of the most useful items in the visualization toolset is the timeline feature, which allows a user to view actions on a device over a specific time period.
- First you must tell FTK which dates you want to focus on. You can do this by selecting a range of dates in the timeline section.
- Once your date range ...
