FTK Connect

Automate Forensic Collection From the First Moments and Incident is Detected
Data breach statistics are staggering, and they continue to get worse. Of course, the largest breaches make the biggest headlines, but any incident or intrusion deserves an investigation. Rapid preservation is key to plugging exploits and preventing another attack.

FTK Connect automates previously time-intensive investigative workflows, which maximizes the speed of incident response and initiates the immediate preservation of electronic evidence that could prove crucial in the digital investigation.

Automate Time-Intensive Manual Workflows
Automate time-intensive manual processes in your e-discovery and incident response workflows with our full-featured API.

Accelerated Post-Breach Investigation
Dramatically reduce the time needed to start a case after your SIEM tool triggers an event. Use the API to integrate seamlessly with your cybersecurity platform (such as Splunk or Cortex) to kick off a post-breach investigation from the first moments after an intrusion has been detected. The API can initiate the immediate collection of electronic endpoint data, preserving evidence related to the root cause of a data breach and saves precious time in the initial stages of incident response.

Integrate With E-Discovery Systems
Integrate with e-discovery systems to automate a standard endpoint collection after someone is put on a litigation hold. This type of automation allows less experienced users to use a litigation hold functionality but still preserve endpoint data automatically.

Integrate Management Tools With FTK® Lab
Integrate your management tools with FTK® Lab to automatically create cases and process jobs with defined organization standards, dramatically cutting the time users wait for jobs to be completed.

Representational State Transfer (REST) Architecture
The API uses the Representational State Transfer (REST) architecture to access and manipulate data based on uniform and predefined operations. The RESTful API is stateless, so each request contains all information necessary to perform the requested action.