Skip to content

mr. eerie

  • Home
  • About

Tag: rtfm

Encrypted 7Z Archives in XWF

I read the manual to understand that encrypted file contents and names in 7Z archives are not currently supported in XWF. XWF is capable of using an associated program to manually review these archives.

Derek Eiri digital forensics Leave a comment 2022-03-092022-03-10

Totally Remove Excluded Items in XWF, Selectively

Using report table associations to totally exclude selected items from a XWF volume snapshot.

Derek Eiri digital forensics Leave a comment 2022-03-022022-03-02

Extracting Data from the Event Payload from .evtx Event Logs with X-Ways Forensics

Today I learned that quotation marks in the Event Log Events.txt file is not a good thing, and what text qualifiers are.

Derek Eiri digital forensics Leave a comment 2022-02-122022-11-11

Previous Versions of the X-Ways Forensics/WinHex Manual

Using Wayback Machine to look at previous versions of the X-Ways Forensics/WinHex user manual.

Derek Eiri digital forensics Leave a comment 2022-01-182022-01-26

Links

  • 'X-Ways Forensics' Video Clips
  • AboutDFIR
  • DFIR Artifact Museum
  • DFIR Community Hardware Fund by DFIRScience
  • DFIR Training
  • Digital Forensics Discord Server
  • DigitalCorpora.orgs
  • Forense nella Nebbia
  • Stark4n6's startme
  • The Hitchhiker's Guide to DFIR
  • The X-Ways Forensics Practitioner's Guide
  • This Week In 4n6

Mastodon

Blog at WordPress.com.
Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy
  • Follow Following
    • mr. eerie
    • Already have a WordPress.com account? Log in now.
    • mr. eerie
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...