Edit Menu
Undo: Reverses the last modification, in case the corresponding undo option was activated.
Cut: Removes the current block from the file and puts it into the clipboard. The data following the block is pulled to the former block beginning.
Copy Block/All/Sector:
- Normally: Copies the current block/the entire file/the current sector into the clipboard. The contents of the clipboard can be pasted or written later.
- As Unicode/ANSI: Specifically copies text from the text column as UTF-16 Unicode even when the text column is not displayed in Unicode, or specifically as ANSI-encoded text even when the text column is not displayed as ANSI ASCII.
- Into New File: Copies the data directly into a new file (not via the clipboard). For instance, this command can be used to recover a lost file from disk sectors.
- Hex Values: Copies the data as concatenated hex values.
- GREP Hex: Copies the data as hex values in GREP syntax.
- Editor Display: Copies the data as text, formatted as if it was displayed in the hex editor, i. e. with an offset, a hex and a text column.
- C/Pascal Source: Copies the data as C/Pascal-formatted source code into the clipboard.
Paste Clipboard: Inserts the clipboard contents at the current position of a file. The file data following this position is moved forward.
Write Clipboard: Copies the clipboard contents to the current file at the current position. The data at this position is overwritten. If the end of the file is encountered, the file size is increased so that the clipboard contents finds place.
Paste Clipboard Into New File: Creates a new file of the clipboard contents.
Empty Clipboard: This command is used to free the memory used by the clipboard.
Remove: Deletes the current block from the file. The data following the block is pulled to the former block beginning. The clipboard is not affected by this command. If the block is equally defined in all open files (i.e. it begins and ends at the same offsets), this command can even be applied to all open files at the same time.
Paste Zero Bytes: Use this command to insert zero bytes at the current position of a file.
Add Block as Virtual File: (forensic license only) If you manually define a block in Volume/Partition/Disk/File mode, this command allows you to add it to the volume snapshot as a carved file, or (in case of File mode) as a child object of the original file. Useful if you wish to treat data in a certain area (e.g. HTML code or e-mail messages found floating around in free space) as a file, e.g. to view it, search it specifically, comment on it, add it to a report, etc. If you manually carve a file within another file in File mode, the resulting file will be marked in the Attr. column as an excerpt and can be filtered as such. Already carved areas in host files are highlighted in File mode. Useful to remind the user whether he or she already has created excerpts from a file and where (e.g. from a large free space virtual file) when continuing to look at that host file.
Define Block: This function is accessible from the menu and the status bar. A dialog box lets you specify the desired block boundaries or size. This command can also be applied to all open files.
Select All: Defines the beginning and the end of the current file as its block limits.