Arkime vs Exterro FTK Imager
| Arkime | Exterro FTK Imager | |
|---|---|---|
| Free plan | Yes | Yes |
| Free trial | No | |
| Paid from | Free | $41.58/mo |
| Platforms | api, Linux, self-hosted, Web | Web, Windows |
| Free plan | Yes | Yes |
| Traffic decryption | No | |
| Deployment | server | |
| Capture sources | both | |
| PCAP support | Yes | |
| CLI tools | Yes | |
| Remote capture | Yes | |
| Flow analysis | Yes | |
| Evidence sources | Live enterprise endpoints; Windows, macOS, and selected Linux artifacts; Microsoft 365; Exchange; SharePoint; OneDrive; Google Workspace; Gmail; Google Drive; Slack; Microsoft Teams; Confluence; AFF4; E01; AD1; RAW/DD | |
| Mobile forensics | No | |
| Disk imaging | Yes | |
| Memory forensics | Yes | |
| Case collaboration | Yes | |
| Supported platforms | Windows, macOS, Linux | |
| Export formats | E01, AFF, RAW |
Listed together in Best Digital Forensics Software