This tool allows you to create and filter timelines, split data into categories, view emails and related metadata, analyze traffic and social connections, and observe geolocation data in a user-friendly environment. It also allows the user to specify a particular theme or color scheme, giving it a customizable feel.
Data visualization with FTK
Getting ready
Open FTK and load up a case (if you are not sure how to do this, see the section Drive acquisition in E01 format with FTK Imager in Chapter 3, Windows Drive acquisition.)
Choose a dataset within the case, then click the visualization icon in the top right-hand side of the screen. This will launch the visualization tool.