FTK 3.0 출시 예정?

Forensic Focus에 올라온 글에 의하면

8월 24일부터 진행되는 HTCIA 에서 AccessData의 FTK 3.0이 전시될 예정이라고 합니다.

성능향상 부분 :

* UI Performance: The FTK GUI is 10 times more responsive across the board, even on machines with only 4GB of RAM.
* Indexing: Indexes quickly and search results populate fast, even with large result sets.
* Distributed Processing: Every copy of FTK 3 comes with 4 workers, allowing you to leverage CPU resources from up to 4 computers (3 distributed workers and 1 worker on the main FTK examiner system).

강력한 새 기능 :

* RAM Analysis: Enumerate all running processes from 32-bit machines, search memory strings, and process RAM captures for passwords, html pages, lnk files and MS Office documents.
* Mac Analysis: Many new capabilities, such as processing B-Trees attributes for metadata, decrypting Sparse Images or Sparse Bundles, PLIST support, SQLite support and more.
* Pornographic Image Identification: Enables the automated detection and identification of pornographic images by analyzing visual features in the image to assess its actual visual content.

아무리 포렌식 조사의 양이 방대해 지고 있다곤 하지만

얘들 너무 무거워지는 거 같습니다. 1.x 버전의 손쉬운 맛은 이제 안드로메다로 가버린듯.

하지만 역시 나와봐야 알겠죠. 설마 어떤 회사처럼 시연회 때 구경만 하게 하지는 않길 바랍니다.

그나저나 EnCase는 UI 좀 안고치나 -_-;;