Exterro FTK Imager vs Plaso
| Exterro FTK Imager | Plaso | |
|---|---|---|
| Free plan | Yes | Yes |
| Free trial | No | |
| Paid from | $41.58/mo | Free |
| Platforms | Web, Windows | Linux, macOS, self-hosted, Windows |
| Free plan | Yes | Yes |
| Evidence sources | Live enterprise endpoints; Windows, macOS, and selected Linux artifacts; Microsoft 365; Exchange; SharePoint; OneDrive; Google Workspace; Gmail; Google Drive; Slack; Microsoft Teams; Confluence; AFF4; E01; AD1; RAW/DD | Storage-media images, files, directories, devices, logs, databases, Windows Registry data, Android and iOS artifacts |
| Mobile forensics | No | Yes |
| Disk imaging | Yes | Yes |
| Memory forensics | Yes | |
| Case collaboration | Yes | |
| Supported platforms | Windows, macOS, Linux | Linux, macOS, Windows, Docker |
| Export formats | E01, AFF, RAW | CSV, JSON, JSON Lines, KML, TLN, XLSX, OpenSearch, Timesketch |
Listed together in Best Digital Forensics Software