ABSTRACT

Let us work through a case with AccessData’s Forensic Tool Kit (ADFTK). Just so you can see what it looks like if no case data has been loaded yet (i.e., starting a brand new case with no loaded sources), let us go through the process (see Exhibit 5.1).