A30-327 · Question #20
In FTK, you navigate to the Graphics tab at the Case level and you do not see any graphics. What should you do to see all graphics in the case?
The correct answer is A. list all descendants. Selecting "List All Descendants" in FTK forces the file browser to recursively include items from all subfolders and containers beneath the current node - without this, the Case-level Graphics tab only displays graphics that are direct children of the case root, leaving nested…
Question
Options
- Alist all descendants
- Brun the graphic files filter
- Ccheck all items in the current list
- Dselect the Graphics container button
How the community answered
(40 responses)- A93% (37)
- C5% (2)
- D3% (1)
Explanation
Selecting "List All Descendants" in FTK forces the file browser to recursively include items from all subfolders and containers beneath the current node - without this, the Case-level Graphics tab only displays graphics that are direct children of the case root, leaving nested items invisible.
Why the distractors are wrong:
- B (run the graphic files filter): A filter narrows an existing result set; it cannot surface items that aren't already listed in the current view.
- C (check all items in the current list): Checking/selecting items changes what you act on, not what is displayed - it won't pull in items from subfolders.
- D (select the Graphics container button): This navigates you to the Graphics tab, which is already where you are; it doesn't expand the scope of what's shown.
Memory tip: Think of FTK's case tree like a collapsed folder structure - "List All Descendants" is the equivalent of "expand all," ensuring every deeply nested graphic bubbles up into the current view. If you see nothing, you need to go deeper, and only option A does that.
Topics
Community Discussion
No community discussion yet for this question.