Chapter 7

Advanced Use of X-Ways Forensics

Abstract

As mentioned in previous chapters, X-Ways Forensics (XWF) allows for looking at the contents of objects as they exist on disk. XWF includes several features that allow you to selectively include pieces of data from an object as opposed to the entire object. XWF also provides ways to adjust the majority of options via dialog boxes using common Windows paradigms such as checkboxes, drop-down lists, text boxes, etc., directly in the graphical user interface (GUI). Most users will never have a need to go beyond what is provided directly in XWF. There are, however, occasions where it is necessary to customize certain aspects of XWF that are not possible using the XWF GUI. Both of these topics as ...

Get X-Ways Forensics Practitioner’s Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.