FTK Imager Lite Version or CLI Version
C
Connor Jackle
FTK Imager does not run in WinFE due to driver dependencies. Need a Lite or CLI version that can run in WinFE 64 bit. The use case is for imaging a machine from a bootable USB with WinFE. This is needed for a true forensic image of a machine as booting Windows creates, deletes, or changes anywhere from 1,000 to over 15,000 files by the time you reach the desktop. Current workaround is ewfaquire CLI tool.