مشاهده نسخه کامل
: Honradez
16-06-2006, 20:47
X-Ways Forensics v13.0 SR-1
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
X-Ways Forensics is an advanced work environment for computer forensic examiners. Runs under Windows 2000/XP (v12.8 for Win98/Me available to licensed users on request). It is closely integrated with the WinHex hex and disk editor and can be purchased as a forensic license for WinHex. X-Ways Forensics comprises all the general and specialist features known from WinHex
* Disk cloning and imaging, even under DOS with X-Ways Replica (forensically sound)
* Examining the complete directory structure inside raw image files, even spanned over several segments
* Native support for FAT, NTFS, Ext2/3, CDFS, UDF
* Built-in interpretation of RAID 0 and RAID 5 systems and dynamic disks
* Viewing and dumping physical RAM and the virtual memory of running processes
* Various data recovery techniques and file carving (hundreds of file signatures can be imported from FileSig)
* Hard disk cleansing to produce forensically sterile media
* Gathering slack space, free space, inter-partition space, and generic text from drives and images
* File and directory catalog creation for all computer media
* Easy detection of and access to NTFS alternate data streams (ADS), even where Encase 5.05 and ILook fail
* Mass hash calculation for files (CRC32, MD5, SHA-1, SHA-256, PSCHF, ...)
* Unlike a competing product, does not depend exclusively on MD5 (collisions in MD5)
* Powerful physical and logical search capabilities for many search terms at the same time
* Bookmarks/annotations
* Bates-numbering of files
and then some:
* Support for the filesystems HFS, HFS+, ReiserFS, Reiser4, UFS, UFS2
* Gallery view for pictures
* Calendar view
* File preview, seamlessly integrated viewer component for 200+ file types
* Automated file signature check
* Write protection to ensure data authenticity
* Complete case management
* Automated activity logging (audit logs)
* Automated reports that can be imported and further processed by any other application that understands HTML, such as MS Word
* Ability to add comments to files and directories in volumes/images
* Ability to tag files and add them to a table of notable items
* Directory tree on the left, ability to explore and tag directories including all their subdirectories
* Synchronizing the sectors view with the file list and directory tree
* Dynamic filters based on true file type, hash set category, timestamps, ...
* Recursive view of all existing and deleted files in all subdirectories
* Automatic identification of encrypted MS Office and PDF documents
* Finds pictures embedded in documents (e.g. MS Word, PDF, PowerPoint) automatically
* Internal viewer for Windows Registry files (all Windows versions); automated Registry report
* Lists the contents of archives directly in the directory browser, even in a recursive view
* Logical search, in all or selected files/directories only, following fragmented cluster chains, in compressed files, optionally decoding text in PDF, WPD, ...
* Powerful search hit listings with context preview, e.g. like “all search hits for the search terms A, B, and D in .doc and .ppt files below \Documents and Settings with last access date in 2004”
* [still testing] Indexing and searching in an index, unique in that it supports solid compound words
* Skin color detection (e.g. a gallery view sorted by skin color percentage greatly accelerates a search for traces of child pornography)
* Match files against the lightning-fast internal hash database
* Ability to import NSRL RDS 2.x, HashKeeper, and ILook hash sets
* Create your own hash sets
* Ability to read and write evidence files (.e01 images), optionally with 256-bit AES encryption
* Create report tables of relevant files
* Ability to copy relevant files to evidence file containers
* Detection of host-protected areas (HPA), a.k.a. ATA-protected areas
More Information :
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
Download Appz + Keygen ( 1.7 MB ) :
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
File Password : [ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
X-Ways Forensics is an advanced work environment for computer forensic examiners. Runs under Windows 2000/XP (v12.8 for Win98/Me available to licensed users on request). It is closely integrated with the WinHex hex and disk editor and can be purchased as a forensic license for WinHex. X-Ways Forensics comprises all the general and specialist features known from WinHex
* Disk cloning and imaging, even under DOS with X-Ways Replica (forensically sound)
* Examining the complete directory structure inside raw image files, even spanned over several segments
* Native support for FAT, NTFS, Ext2/3, CDFS, UDF
* Built-in interpretation of RAID 0 and RAID 5 systems and dynamic disks
* Viewing and dumping physical RAM and the virtual memory of running processes
* Various data recovery techniques and file carving (hundreds of file signatures can be imported from FileSig)
* Hard disk cleansing to produce forensically sterile media
* Gathering slack space, free space, inter-partition space, and generic text from drives and images
* File and directory catalog creation for all computer media
* Easy detection of and access to NTFS alternate data streams (ADS), even where Encase 5.05 and ILook fail
* Mass hash calculation for files (CRC32, MD5, SHA-1, SHA-256, PSCHF, ...)
* Unlike a competing product, does not depend exclusively on MD5 (collisions in MD5)
* Powerful physical and logical search capabilities for many search terms at the same time
* Bookmarks/annotations
* Bates-numbering of files
and then some:
* Support for the filesystems HFS, HFS+, ReiserFS, Reiser4, UFS, UFS2
* Gallery view for pictures
* Calendar view
* File preview, seamlessly integrated viewer component for 200+ file types
* Automated file signature check
* Write protection to ensure data authenticity
* Complete case management
* Automated activity logging (audit logs)
* Automated reports that can be imported and further processed by any other application that understands HTML, such as MS Word
* Ability to add comments to files and directories in volumes/images
* Ability to tag files and add them to a table of notable items
* Directory tree on the left, ability to explore and tag directories including all their subdirectories
* Synchronizing the sectors view with the file list and directory tree
* Dynamic filters based on true file type, hash set category, timestamps, ...
* Recursive view of all existing and deleted files in all subdirectories
* Automatic identification of encrypted MS Office and PDF documents
* Finds pictures embedded in documents (e.g. MS Word, PDF, PowerPoint) automatically
* Internal viewer for Windows Registry files (all Windows versions); automated Registry report
* Lists the contents of archives directly in the directory browser, even in a recursive view
* Logical search, in all or selected files/directories only, following fragmented cluster chains, in compressed files, optionally decoding text in PDF, WPD, ...
* Powerful search hit listings with context preview, e.g. like “all search hits for the search terms A, B, and D in .doc and .ppt files below \Documents and Settings with last access date in 2004”
* [still testing] Indexing and searching in an index, unique in that it supports solid compound words
* Skin color detection (e.g. a gallery view sorted by skin color percentage greatly accelerates a search for traces of child pornography)
* Match files against the lightning-fast internal hash database
* Ability to import NSRL RDS 2.x, HashKeeper, and ILook hash sets
* Create your own hash sets
* Ability to read and write evidence files (.e01 images), optionally with 256-bit AES encryption
* Create report tables of relevant files
* Ability to copy relevant files to evidence file containers
* Detection of host-protected areas (HPA), a.k.a. ATA-protected areas
More Information :
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
Download Appz + Keygen ( 1.7 MB ) :
[ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]
File Password : [ برای مشاهده لینک ، لطفا با نام کاربری خود وارد شوید یا ثبت نام کنید ]