x-ways forensics – The X-Ways Forensics Practitioner's Guide/2E

Cool update to the XWFIM, Portable Install

Eric is at it again. This time with a pretty cool update to the X-Ways Forensics Install Manager (v0.0.7.0). The update to the XWFIM now includes an option to create a portable install to external media. Page 13 of the Practitioner’s Guide to X-Ways Forensics details how to do this manually, but XWFIM does it for you with a few clicks.

drive letter — Cool! Notepad++ and Volume Label renamed.

Another cool little feature is that the XWFIM creates all the case folders for you in the process of the portable install. Neat.

Don’t forget, if you liked the Practitioner’s Guide to X-Ways Forensics, write a review on Amazon to let us know how you liked it (or if you didn’t…). And if you use XWF and didn’t buy the guide…you are missing out on more than a few tips and tricks that will save you dozens of keystrokes.

X-Ways Forensics Imaging Article

In case you missed an article on X-Ways Forensics Imaging (page 40), you can download a free copy of the issue of eforensicsmag here: http://eforensicsmag.com/jumpstart-3-free/

XWF Imaging — You may like the WinFE article too…I know the guy that wrote that article…

The article is an overview of imaging with X-Ways Forensics, which is covered in more detail in the XWF Guide. If you haven’t bought the guide yet and are on the fence on whether XWF is right for you, check out the article on the one feature of imaging and I am sure you will not be on the fence anymore.

Xways-Cover — I use this guide myself…and I was a coauthor!

Case Studies

Here are some of the case studies we are working on for our current and last chapter:

Electronic Discovery (IP theft, document collection, contract antedating)
Consent Searches (triage/preview)
Parole Searches (triage/preview)
Malicious Software
Intrusion
Fraud
Child Pornography
Cell phone analysis

Several of these are being submitted by contributors, and all are to be detailed using XWF and suggested case flow processes. Contributors to be duly noted (as much as they allow).