{"id":4267,"date":"2022-08-18T07:04:22","date_gmt":"2022-08-18T14:04:22","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4267"},"modified":"2022-08-18T07:04:23","modified_gmt":"2022-08-18T14:04:23","slug":"how-to-run-ftk-imager-from-a-flash-drive-ftk-imager-lite","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4267","title":{"rendered":"How to Run FTK Imager from a Flash Drive (FTK Imager Lite)"},"content":{"rendered":"\n<p><strong>Question<\/strong><\/p>\n\n\n\n<p>How can I run Imager from a portable drive?<\/p>\n\n\n\n<p><strong>Answer<\/strong><\/p>\n\n\n\n<p><strong>Prerequisites:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>A computer other than the target system<\/li><\/ul>\n\n\n\n<p><strong>Procedure:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>On a machine other than the system to be imaged, install FTK Imager<\/li><li>Insert a flash drive formatted with either the FAT32 or NTFS file system<\/li><li>Copy the entire &#8220;FTK Imager&#8221; installation folder (typically &#8220;C:\\Program Files\\AccessData\\FTK Imager&#8221; or &#8220;C:\\Program Files (x86)\\AccessData\\FTK Imager&#8221;) to your flash drive<\/li><li>Insert the flash drive in the system to be imaged<\/li><li>Navigate to the folder you created on the flash drive<\/li><li>Run&nbsp;<strong>FTK Imager.exe<\/strong>&nbsp;(as Administrator) and use Imager as you normally would<\/li><\/ol>\n\n\n\n<p><strong>Note:<\/strong>&nbsp;Because a live system is constantly changing, imaging a live system may produce an image that is not replicable.&nbsp; FTK Imager will write to the system RAM and perhaps the hard drive page file during the imaging process.&nbsp; Be aware of the risks of imaging a live system and make the decision carefully.<\/p>\n\n\n\n<p><strong>Overview<\/strong><\/p>\n\n\n\n<p>This will allow a user to create a portable &#8220;Imager Lite&#8221; from any full release of Imager.<\/p>\n\n\n\n<p><strong>Please note:<\/strong><\/p>\n\n\n\n<p>64-bit versions of FTK imager (version 3.4.3 and higher) require Microsoft Foundation Class (MFC) add-on files to run. If the target machine does not have any MFC files available, then errors will occur about missing MFC files.<\/p>\n\n\n\n<p>To ensure that newer versions of FTK imager can function without error, when being run from a removable, please also copy the MFC files to the removable.<\/p>\n\n\n\n<p>I.e. Copy all mfc100*, mfc110*, mfc120*, and mfc140* files from a &#8220;c:\\windows\\system32&#8221; folder to the directory on the removable that contains the executable for FTK Imager, or copy to the root of the removable drive.<br><\/p>\n\n\n\n<p>FTK Imager 4.5.0 needs 3 extra DLLs from Microsoft Visual C++ 2015 redistributable to function (which can be found in the &#8220;c:\\windows\\system32&#8221; folder) that you may need to copy to the removable drive as well:<\/p>\n\n\n\n<p>* mfc140u.dll<br>* msvcp140.dll<br>* vcruntime140.dll<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Ref: https:\/\/exterro.freshdesk.com\/support\/solutions\/articles\/69000765662-run-ftk-imager-from-a-flash-drive-imager-lite-<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Question How can I run Imager from a portable drive? Answer Prerequisites: A computer other than the target system Procedure: On a machine other than the system to be imaged, install FTK Imager Insert a flash drive formatted with either the FAT32 or NTFS file system Copy the entire &#8220;FTK Imager&#8221; installation folder (typically &#8220;C:\\Program <a class=\"read-more\" href=\"https:\/\/SUMMALAI.COM\/?p=4267\">Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1258,497],"tags":[1259,1260,1261],"class_list":["post-4267","post","type-post","status-publish","format-standard","hentry","category-forensics-investigation","category-solutions","tag-ftk-imager-lite","tag-run-ftk-imager-from-a-flash-drive","tag-run-ftk-imager-from-a-usb"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4267"}],"version-history":[{"count":2,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4267\/revisions"}],"predecessor-version":[{"id":4269,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4267\/revisions\/4269"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}