X-Ways Forensics – Page 7 – The X-Ways Forensics Practitioner's Guide/2E

Multiple File Finder X-Tension for X-Ways Forensics

Here is a new X-Tension for XWF that does a few neat things, such as searching for specific files and adding them to the report table, and exporting files for external analysis: http://www.gaijin.at/en/xtmultifilefinder.php

Starting the last chapter!

We are starting the last chapter (Case Studies) and have a few contributors already for case examples. We’ll gladly take more as we want to have a wide range of case studies using X-Ways.

For everyone waiting, we are finishing the book much earlier than we had planned, only because it has been a smooth process with the authors (Brett and Eric), the Tech Editor (Jimmy), and publisher (agreeing to push up the schedule to keep up with us!).

We’ve also had offers of translating the book into other languages, and are visiting that topic. So far, maybe French…suggestions for others?

Case Studies with X-Ways

We are WAY ahead of our planned writing schedule, mostly because of the XWF Guide writing and editing team are getting things done, fast.

With that, we are reaching the Case Studies chapter, where we will give specific case flow and XWF usage by the type of case. That means, we have a section on “How to Use XWF on a Child Pornography Case” and “How to Use XWF in an Electronic Discovery Case”, and more.

For this chapter to be of most use to the most number of readers, please give us what type of cases you want us to cover. PLUS, if you have used XWF in a case that worked well, send us your (sanitized) case study and we will add it to the chapter. Depending on how you’d like credit, we can credit you with the specific case (“case study submitted by ….”), or generically (“so and so” contributed to the case studies chapter), or not at all if you want to remain in the background with a case study.

Don’t forget to follow us on Twitter to keep up with the book’s progress. It’s going fast and you don’t want to miss out.

I can also say that although I felt I was competent XWF user (since 2004!), the research, testing, and delving in XWF for this book opened my eyes to more capabilities of XWF that I never imagined. You won’t be disappointed and after reading this book, you will be using that green XWF dongle a lot!

X-Ways Guide Twitter account

If you really want to keep up with the book’s progress in near real time…follow us on twitter: @xwaysguide

Table of contents updated!

Chapter 4 is wrapping up! We each have one more chapter to go and then we start the case studies.

The table of contents page is updated to reflect the topics of each chapter and, for the completed chapters, the page and word count of each.

XWFRT updated to 0.4.8

Several fixes based on user testing in this build to include:

Added Undo button to reverse the tweaking process
Rearranged GUI to make it less congested
Undo tweaking automagically if an error occurs to keep report in a known good state
A bunch of processing fixes to allow for tweaking more than one report in a row

XWFIM goes International!

Just released version 0.0.4.8 that includes fixes for international users. The issue had to do with date/time formats and the use of non period decimal separators.

Both should be fixed, but if any of our international friends are having issues, please shoot me an email and I will get it resolved ASAP

XWFRT and XWFIM updated

You can let the latest build of XWFIM from the URL in the X-Ways Forums or just use the auto-update feature in the program by looking in the lower right corner of the program after it starts.

XWFRT was also updated recently. again you can auto update or pull a copy from here:

https://www.dropbox.com/s/6labcj537jlxnzz/XWFRT.exe

if you run into any reports that cause XWFRT to throw an error, please zip and email me all of the Report*.html files (not any of the directories which contain files) and i will get the issue resolved ASAP

Enjoy!

XWFRT 0.0.4.6 released

New in this version is the ability to attach one or more external files to your report.

This includes things like XWF registry reports (as seen below). You can include any kind of file to the report in this manner. HTML files will be viewable directly in the browser.

The screenshot below shows 2 registry reports being added as external files.