WinHex & X-Ways Forensics
Table of contents
- Contents
- General Information
- User Interface
- Menu Reference
- Options
-
Forensic Features
- Image Interpretation
- Case Management
- Multi-User Coordination
- Evidence Objects
- Case Log
- Case Report
- Report Tables
- Internal Viewer
- Registry Report
- Simultaneous Search
- Logical Search
- Search Hit Lists
- Search Term Lists
- Event List
- Mount As Drive Letter
- File Type Categories.txt
- Hash Database
- PhotoDNA
- FuzZyDoc
- External Analysis Interface
-
Volume Snapshots
- File System Data Structure Search
- File Header Signature Search
- Block-wise Hashing and Matching
- Compute Hash
- Verify File Types
- Extract Internal Metadate, Browser History, and Events
- Include Contents of Zip and RAR archives etc.
- Extract E-mail Messages and Attachments
- Uncover Embedded Data
- Capture Still Images from Videos
- Picture Analysis and Processing
- Identify known documents using FuzZyDoc
- File Format Specific and Statistical Encryption Tests
- Indexing
-
Selected Concepts
- Edit Modes
- Scripts
- X-Tensions API
- Disk Editor
- Memory Editor/Analysis
- Conversions
- Modify Data
- Sector Superimposition
- Wiping and Initializing
- Disk Cloning
- Images and Backups
- Dummy Image Segments
- Skeleton Images
- Evidence File Containers
- Related Items
- Generator Signatures
- Time Zone Concept
- Template Editing
- Data Recovery
- Recover/Copy
- Duplicate File Detection
- Surrogate patterns