You are asked to process a case using FTK and to produce a report that only includes selected graphics. What allows you to display only flagged graphics?

Question

Options

• AList by File Path
• BList File Properties
• CGraphic Thumbnails
• DSupplementary Files

• A
  2% (1)
• B
  2% (1)
• C
  88% (37)
• D
  7% (3)

Explanation

Graphic Thumbnails (option C) is the FTK view that lets you visually browse image files and filter the display to show only those you have flagged. When building a report, this view gives you direct control over which graphics are included, so your output contains only the evidence items you've deliberately marked - not every graphic in the case.

Why the distractors are wrong:

• A. List by File Path - organizes files by their folder/directory structure; it's a navigation aid, not a graphics filter.
• B. List File Properties - displays file metadata (size, timestamps, hash values); it's for examining attributes, not visually selecting images.
• D. Supplementary Files - refers to additional supporting documents attached to a report, not a mechanism for filtering flagged graphics.

Memory tip: Think of "Graphic Thumbnails" as your digital lightbox - just like a photographer flags favorite shots in a lightbox to select only the best for a portfolio, FTK's Graphic Thumbnails view lets you flag and isolate exactly the images you want in your forensic report.

No community discussion yet for this question.