FTK Imager Lite For usage, see : Formation_DFIR.pdf (slide 622) FastIR https://github.com/SekoiaLab/fastir_artifacts
