Chapter 10

X-Ways Forensics and Criminal Investigations

Abstract

A “triage,” or preview, of computer systems is an effective method of determining whether evidence exists on a computer system without conducting a complete, forensic analysis. Although X-Ways Forensics (XWF) is a full-featured forensic application, the design allows for previews of electronic media in as much detail as needed. Because the capabilities of XWF are not diminished when used in the field, you quickly can review many computers or conduct complete forensic analysis onsite as needed.

Keywords

Criminal; Consent; Investigation; Probable cause; Reasonable suspicion; Parolee; Supervision; Triage; Preview; WinFE; Forensics

Information in this chapter

• Introduction

• X-Ways ...

Get X-Ways Forensics Practitioner’s Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.