using FTK imager to extract data from disk
using FTK imager to extract data from disk, KAPE to , and Volatility to