Welcome to Scribd. Sign in or start your free trial to enjoy unlimited e-books, audiobooks & documents.Find out more
Download
Standard view
Full view
of .
Look up keyword or section
Like this
1Activity

Table Of Contents

1 Preface
1.1 About WinHex and X-Ways Forensics
1.2 Legalities
1.3 License Types
1.4 Differences between WinHex and X-Ways Forensics
1.5 Getting Started with X-Ways Forensics
2 Technical Background
2.1 Using a Hex Editor
2.2 Endian-ness
2.3 Integer Data Types
2.4 Floating-Point Data Types
2.5 Date Types
2.6 ANSI ASCII/IBM ASCII
2.7 Checksums
2.8 Digests
2.9 Technical Hints
3 Forensic Features
3.1 Case Management
3.2 Evidence Objects
3.3 Case Log
3.4 Case Report
3.5 Volume Snapshots
3.6 Directory Browser
3.7 Report Tables
3.9 Registry Report
3.10 Mode Buttons
3.11 Simultaneous Search
3.12 Logical Search
3.13 Search Hit Lists
3.14 Search Term List
3.15 Indexing, Index Search
3.16 Index Optimization
3.17 Hash Database
3.18 Time Zone Concept
3.19 E-Mail Processing
3.20 Evidence File Containers
3.21 External Analysis Interface
4 Menu Reference
4.1 Directory Browser Context Menu
4.2 File Menu
4.3 Edit Menu
4.4 Search Menu
4.5 Position Menu
4.6 View Menu
4.7 Tools Menu
4.8 File Tools
4.9 Specialist Menu
4.10 Options Menu
4.11 Window Menu
4.12 Help Menu
4.13 Windows Context Menu
5 Some Basic Concepts
5.1 Start Center
5.2 Entering Characters
5.3 Edit Modes
5.4 Status Bar
5.5 Scripts
5.6 WinHex API
5.7 Disk Editor
5.8 RAM Editor/Analysis
5.9 Template Editing
6 Data Recovery
6.1 File Recovery with the Directory Browser
6.2 File Recovery by Type/File Header Signature Search
6.3 File Type Definitions
7.1 General Options
7.2 Directory Browser Options
7.3 Volume Snapshot Options
7.4 Undo Options
7.5 Security & Safety Options
7.6 Search Options
7.7 Replace Options
8 Miscellaneous
8.1 Block
8.2 Modify Data
8.3 Conversions
8.4 Wiping and Initializing
8.5 Disk Cloning
8.6 Images and Backups
8.7 Hints on Disk Cloning, Imaging, Image Restoration
8.8 Backup Manager
8.9 Reconstructing RAID Systems
8.10 Position Manager
8.11 Data Interpreter
8.12 Useful Hints
Appendix A: Template Definition
1 Header
2 Body: Variable Declarations
3 Body: Advanced Commands
4 Body: Flexible Integer Variables
Appendix B: Script Commands
Appendix C: Master Boot Record
0 of .
Results for:
No results containing your search query
P. 1
Manual

Manual

Ratings: (0)|Views: 84|Likes:

More info:

Published by: Renalde Kapami Ntsala on Sep 29, 2011
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

01/18/2013

pdf

text

original

You're Reading a Free Preview
Pages 4 to 20 are not shown in this preview.
You're Reading a Free Preview
Pages 24 to 31 are not shown in this preview.
You're Reading a Free Preview
Pages 35 to 81 are not shown in this preview.
You're Reading a Free Preview
Pages 85 to 124 are not shown in this preview.

You're Reading a Free Preview

Download
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->