Problem

How To: Determine which database FTK is using

 

Resolution

 

  1. Open "C:\ProgramData\AccessData\Products\Forensic Toolkit\FTK Databases.xml" (or "C:\Documents and Settings\All Users\Application Data\AccessData\Products\Forensic Toolkit\FTK Databases.xml") in Notepad.
  2. Find the entry for the FTK version in question.
  3. If that entry has the value Postgres, then FTK is using PostgreSQL. If the entry has the value MSSQL, then FTK is using MSSQL. If the entry is missing a flag, then FTK is using Oracle.

 

Cause

If you have multiple databases installed, it may be difficult to keep track of which DB is being used with a given version of FTK. In older versions of FTK, it is important to know which DB is being used in order to install the correct KFF.