ADF Triage-G2 vs Exterro FTK Imager

ADF Triage-G2 is digital forensic triage software for computer and media exploitation during sensitive site exploitation. ADF describes that work as supporting military and intelligence needs such as counterterrorism, force protection, and national security. Designed for non-technical operators, it uses a two-step process to scan devices, extract material, and analyze intelligence. It can be deployed on a small USB key for field reconnaissance. Rosoka entity extraction and multilingual translation are standard; ADF says its text analytics processes documents in 230+ languages to identify entities and locations in unstructured documents. The software handles evidence from computers, iOS and Android devices, USB devices, storage media, documents, emails, text communications, and digital images. Listed export formats are PDF, VICS, HTML, and CSV. Boot-mode tools do not change disks, according to ADF; live scans avoid changing file timestamps but leave traces, which stealth mode makes harder to locate. Pricing is available on request, with one-year or three-year subscription licenses that include support, maintenance, and upgrades during the term. There is no free plan; a free 30-day evaluation is available to qualified organizations.

Exterro FTK Imager is a forensic imaging and preview tool for acquiring and preserving digital evidence. It creates full disk images in multiple industry-standard formats and verifies them with MD5 or SHA-1 hashes. Investigators can preview files and folders before acquisition, capture volatile RAM and registry data from a live device, and read or write common forensic image formats. Files can be exported for further analysis in FTK Forensic Toolkit. Supported acquisition sources include Windows and Linux hard drives, CDs and DVDs, thumb drives and other USB devices. The tool runs on Windows only, though it can image a Linux device; it does not collect directly from phones or other mobile devices. The free FTK Imager plan is listed at free. FTK Imager Pro costs $499 a year and adds encryption-aware workflows, iOS advanced logical collection, faster preview and targeted acquisition. Exterro identifies incident response and DFIR teams, law enforcement, forensic examiners, and corporate security and HR investigators as intended users.