I read the manual to understand that encrypted file contents and names in 7Z archives are not currently supported in XWF. XWF is capable of using an associated program to manually review these archives.
Using report table associations to totally exclude selected items from a XWF volume snapshot.
Week 2 of Metaspike's CTF 2022 competition. Now with more guessing!
Week 1 of Metaspike's CTF 2022 competition.
The symbol ∃ means “there exists.”
Today I learned that quotation marks in the Event Log Events.txt file is not a good thing, and what text qualifiers are.
BitLocker use and related prefetch files for connected storage devices.
Hashing file(s) with X-Ways Forensics.
Using WinHex to initialize $MFT records.
Using Wayback Machine to look at previous versions of the X-Ways Forensics/WinHex user manual.