Category: Uncategorized

Starting the last chapter!

We are starting the last chapter (Case Studies) and have a few contributors already for case examples.  We’ll gladly take more as we want to have a wide range of case studies using X-Ways.

Image

For everyone waiting, we are finishing the book much earlier than we had planned, only because it has been a smooth process with the authors (Brett and Eric), the Tech Editor (Jimmy), and publisher (agreeing to push up the schedule to keep up with us!).

We’ve also had offers of translating the book into other languages, and are visiting that topic.  So far, maybe French…suggestions for others?

X-Ways Guide Twitter account

If you really want to keep up with the book’s progress in near real time…follow us on twitter: @xwaysguide

XWFRT 0.0.4.6 released

New in this version is the ability to attach one or more external files to your report.

This includes things like XWF registry reports (as seen below). You can include any kind of file to the report in this manner. HTML files will be viewable directly in the browser.

The screenshot below shows 2 registry reports being added as external files.

ExternalItem1

And here we see what the report would look like as a result of including the files.

 

 

ExternalItem2

XWFRT now available

More to come and i am sure someone will break it, but for now, here it is!

 

https://www.dropbox.com/s/6labcj537jlxnzz/XWFRT.exe

 

kick it around and email me with any bugs or suggestions

XWFIM updated

Just pushed version 0.4.3 out.

 

This version will now track the last selected version as opposed to always defaulting to the newest available version

I also added a check on startup for any new updates for the last version you selected. That way you will know as soon as you start XWFIM whether there are updates or not.

Finally, i fixed a (stupid) bug related to mplayer install when doing a new or clean install.

 

please report any issues to me here or via email and I will get em fixed ASAP!

X-Tensions, what would you like to see it do?

Do you have any ideas for an X-Tensions based plugin in X-Ways? if so, post it in the comments! I have a few ideas for the advanced chapter which includes X-Tensions, but want to hear from the community as well.

Chapter 6 is wrapping up!

Chapter 6 is all about searching in X-Ways Forensics. Chapter 6 has the following sections:

  • Introduction
  • Simultaneous Search
  • Regular expressions
  • GREP and regular expressions in XWF
  • Indexed search
  • Reviewing search hits
  • Text search
  • Hexadecimal search
  • Shortcuts
  • Conclusion

As of right now, the chapter is 52 pages long and consists of 9,041words.

UPDATE: The chapter is to tech review and weighs in at 54 pages consisting of 9,660 words.

Chapter 3 is in tech review!

We just submitted our biggest chapter yet (over 60 pages!) to our technical editor. Once he is done with it, its off to the publisher!

X-Ways Forensics Install Manager

X-Ways Forensics Install Manager

Licensed users of  X-Ways Forensics can download Eric Zimmerman’s install manager (XWFIM) from the X-Ways Forensics support forum.   Eric’s creation of a GUI install application for XWF is really neat, minimizes the effort to configure your installation, and makes updates simple and quick.  Thanks to Eric!

X-Ways Forensics Practitioner’s Guide is coming!

Eric Zimmerman and Brett Shavers have started writing the “X-Ways Forensics Practitioner’s Guide”, due out toward the end of year 2013.

Check back as to when the guide will be available.   This guide intends to be the source of using X-Ways Forensics.