Something else cool about XWF
Consider the differences between X-Ways v12 below: X-Ways Forensics version 12 With the current version 17: X-Ways Forensics version 17 They look the same! XWF has had literally hundreds upon hundreds of significant updates over this time between…
Read MoreImaging with X-Ways Forensics
The current (and free) issue of eForensics Magazine has an article on imaging with X-Ways Forensics. Of course, the XWF Guide is more detailed, but to get an idea of some of what XWF can do with imaging, take a look at the article.…
Read MoreX-Ways Forensics and WinFE
A faster WinFE build is available on http://winfe.wordpress.com/ that includes a script to add XWF to the build. Of course, you have to have a license for XWF for the script to add it to the build. As of now, it includes FTK Imager and…
Read MoreCreating distributable test images
I’m in the process of creating working materials to go along with the XWF Guide in the form of exercises and test images. I expect to be finished in 2014 or 2015 or …(it all depends on time available). The materials will be freely…
Read MoreX-Ways Users Conference
Very cool. Meet Eric Zimmerman and Craig Ball at The Inaugural Australian X-Ways Users Conference in Canberra in March 2014! The best part…you get a copy of the XWF Guide :) ] If you can’t make it to this conference, get…
Read MoreAnother free tool for X-Ways, from Magnet Forensics
Magnet Forensics provides a FREE tool at http://info.magnetforensics.com/tsv-to-tln-converter, which converts the X-Ways generated TSV file into the TLN format. From the tutorial, this looks to be pretty neat and you can’t beat the price…
Read MoreXWFIM version 0.0.5.4 released
Just released version 0.5.4 of XWFIM. Changelog: Change: Renamed Settings.bin to xwfim.bin since people seemed to run both XWFIM and XWFRT from same directory and this caused problems Change: Updated book cover image and URL when clicking on the book…
Read MoreXWFIM updated
Just posted 0.0.5.3. This fixes a few issues related to checking for new versions when more than one zip file exists as they often do when it comes to prereleases. If you get an error about “more than one element” on startup, dont sent…
Read MoreCase Studies
Here are some of the case studies we are working on for our current and last chapter: Electronic Discovery (IP theft, document collection, contract antedating) Consent Searches (triage/preview) Parole Searches (triage/preview) Malicious Software…
Read More