Derek explores XWF's functionality to review and report on Internet browser activity.
Exploring OCR Capability (Tesseract) with XWF
Derek rick and rolls with XWF's optical character recognition (OCR) capability.
Growing with XWF
Derek reflects on how XWF influenced his growth in digital forensics.
X-Ways Forensics, Re: Training Options
Derek briefly describes training options available for XWF.
Encrypted 7Z Archives in XWF
I read the manual to understand that encrypted file contents and names in 7Z archives are not currently supported in XWF. XWF is capable of using an associated program to manually review these archives.
Totally Remove Excluded Items in XWF, Selectively
Using report table associations to totally exclude selected items from a XWF volume snapshot.
Metaspike CTF, Week 2
Week 2 of Metaspike's CTF 2022 competition. Now with more guessing!
Metaspike CTF, Week 1
Week 1 of Metaspike's CTF 2022 competition.
XWF Tool Tip, File Existence
The symbol ∃ means “there exists.”
Extracting Data from the Event Payload from .evtx Event Logs with X-Ways Forensics
Today I learned that quotation marks in the Event Log Events.txt file is not a good thing, and what text qualifiers are.
mr. eerie 