Kokino Forensic Toolkit (Kokino FTK): open-source disk forensics in your browser. E01, raw, VHD(X), VMDK, ISO; NTFS, FAT, exFAT, ext2/3/4, HFS+, APFS, ISO 9660, UDF; BitLocker, shadow copies, triage collections (KAPE, Velociraptor, UAC). Windows, macOS and Linux artifacts, browsers, email (Outlook PST/OST, mbox, Apple Mail), carving, correlation.
-
Updated
Nov 13, 2026 - Rust