FTP Forensics Tweet 

FTP (short for File Transfer Protocol) is the preferred method of transferring files from a computer to a website or an online storage facility. The FTP protocol can be operated either through the browser or through specialist software called FTP Clients. People use FTP clients all the time to update their websites, upload new web pages or other files (i.e. documents, photos, video, music etc.).

As some of the FTP activity may take place through a browser and not a dedicated FTP client (a standalone piece of software) the user may not realise they have actually engaged in using this protocol.

FTP activity, like any other computer activity leaves traces behind. These traces provide insight on what kind of files have been transferred from and to this computer.

FTP Forensics is a specialised part of computer forensics and it is often disregarded by inexperienced investigators.

Here at Strathclyde Forensics we make sure that any FTP evidence we can uncover will be checked against the case, in order to establish any evidential value.