XWFIM version released

Just released version 0.5.4 of XWFIM.


Change: Renamed Settings.bin to xwfim.bin since people seemed to run both XWFIM and XWFRT from same directory and this caused problems
Change: Updated book cover image and URL when clicking on the book image
Change: Delete any old viewer directories before unzipping a new version to avoid file inconsistencies across viewer versions


If you get a crash about “key not found” or similar, delete settings.bin and restart. Prior to this release, both XWFIM and XWFRT used the same file, settings.bin, to store configuration data. If you can both programs from the same directory this would cause issues.


This update will download automatically once you start XWFIM. Click the lower right corner of the application for details.

XWFIM updated

Just posted This fixes a few issues related to checking for new versions when more than one zip file exists as they often do when it comes to prereleases.


If you get an error about “more than one element” on startup, dont sent the error report, do not exit, then proceed to update using the built in updating feature. Worst case just redownload it from XWF website and it should be fixed.


XWFRT updated to 0.4.8

Several fixes based on user testing in this build to include:

  • Added Undo button to reverse the tweaking process
  • Rearranged GUI to make it less congested
  • Undo tweaking automagically if an error occurs to keep report in a known good state
  • A bunch of processing fixes to allow for tweaking more than one report in a row



XWFIM goes International!

Just released version that includes fixes for international users. The issue had to do with date/time formats and the use of non period decimal separators.

Both should be fixed, but if any of our international friends are having issues, please shoot me an email and I will get it resolved ASAP

XWFRT and XWFIM updated

You can let the latest build of XWFIM from the URL in the X-Ways Forums or just use the auto-update feature in the program by looking in the lower right corner of the program after it starts.

XWFRT was also updated recently. again you can auto update or pull a copy from here:


if you run into any reports that cause XWFRT to throw an error, please zip and email me all of the Report*.html files (not any of the directories which contain files) and i will get the issue resolved ASAP


XWFRT released

New in this version is the ability to attach one or more external files to your report.

This includes things like XWF registry reports (as seen below). You can include any kind of file to the report in this manner. HTML files will be viewable directly in the browser.

The screenshot below shows 2 registry reports being added as external files.


And here we see what the report would look like as a result of including the files.




Coming soon…X-Ways Forensics Report Tweaker, or XWFRT for short

Ever generate a report in XWF and ended up with more than one Report*.html page? Ever been stymied by the fact that those handy menus at the top don’t link to anything outside the main Report.html page?

Yea, me too, but no more!

This isnt quite done yet, but its close. here is an overview and some screenshots. In my testing, reports get tweaked in less than a second or 2 for a 9 page XWF report.


Here is what the main interface looks like. Basically, choose the case file, choose the directory where you exported your report to, set some other option information (like who you are, your agency, a logo), write a narrative (if you want) and TWEAK!

3-27-2013 9-45-40 AM


The Narrative is nice because it supports HTML, so if you wanted to get crazy and write up a nice, fancy report with lists and stuff to include in your report, go for it!

The items at the top, like the logo and the agency, arr taken from what you enter in XWFRT

3-27-2013 9-45-51 AM


The menu on the left contains items for general case info, all evidence items and, if present, audit trail information. Clicking a menu loads the relevant section into the main part of the window (the General tab is shown below).

3-27-2013 9-45-54 AM



here we see the evidence items page

3-27-2013 9-45-57 AM



and finally, clicking on a report table page.

3-27-2013 9-46-02 AM



I have a bit more polish to put on this thing before i release the first version to include having a setting in the GUI to control the max # of items on a report table page. For example, if you exported 1500 images in report table “Foobar” and set the max per page in XWFRT to 500 items a page, you would get Part 1, Part 2, and Part 3 links under the “Foobar” heading.


Oh yea, the entire look and feel is all controlled by CSS, so you can, by editing one simple file, completely change the look and feel of the report to suit your department’s needs (colors, layout, borders, EVERYTHING)


What else does the community want to see this thing do?

XWFIM updated

Just pushed version 0.4.3 out.


This version will now track the last selected version as opposed to always defaulting to the newest available version

I also added a check on startup for any new updates for the last version you selected. That way you will know as soon as you start XWFIM whether there are updates or not.

Finally, i fixed a (stupid) bug related to mplayer install when doing a new or clean install.


please report any issues to me here or via email and I will get em fixed ASAP!

%d bloggers like this: