CSAM, Hashing, and AI Caution

Justin and hosts compare hash-based CSAM validation with AI detections and stress higher rigor for AI-derived hits.

Play episode from 41:16

chevron_right

Transcript

chevron_right

Transcript

Episode notes

Justin Tolman from Exterro joins the Forensic Focus Podcast to talk about the future of FTK and the role FTK Imager still plays in everyday casework. He explains why the original free version remains available, and what prompted the introduction of Imager Pro with added capabilities like BitLocker decryption and iOS collections. Justin also reflects on his time in law enforcement and training, and why the investigative side of the work still holds a strong pull.

Looking ahead, Justin shares where FTK development is headed — from large-scale processing and streamlined review workflows to Whisper-based audio transcription and careful, targeted use of AI for tasks like summarising long documents and cross-media searching. He also previews Exterro's upcoming Inform event — a 15-hour global broadcast featuring talks from practitioners around the world — and invites the community to get involved.

#DigitalForensics #DFIR #FTK #Exterro #ForensicImaging #MobileForensics #IncidentResponse

00:00 Welcome to the Forensic Focus Podcast

00:31 Introducing Justin Tolman from Exterro

01:46 Justin's Journey into Forensics

03:10 Transition to Training and Exterro

06:31 FTK Imager Pro: Features and Benefits

14:36 Training and Community Resources

16:29 Updates on FTK Suite and Scalability

19:10 On-Prem vs. Cloud Solutions

26:57 AI in Forensics: Benefits and Challenges

37:45 Addressing AI Bias in Forensics

38:53 Case Study: AI Misinterpretation in Seattle Shooting