Category: Disk Image

MFTView (version 1.1.0)

This software is designed to show and decode the contents of an extracted MFT file. It has an inbuilt hex editor (based on RevEnge and the same as that seen in LinkAlyzer and PmExplorer) when you select a file entry from the file list the MFT is displayed raw in the hex view and the …

Continue reading »

Permanent link to this article: http://www.darknessgate.com/2012/09/11/mftview-version-1-1-0/

X-Ways Forensics [Commercial Application]

X-Ways Forensics, the forensic edition of WinHex, is a powerful and affordable integrated computer forensics environment with numerous forensic features, rendering it a powerful disk analysis tool: capturing free space, slack space, inter-partition space, and text, creating a fully detailed drive contents table with all existing and deleted files and directories and even alternate data …

Continue reading »

Permanent link to this article: http://www.darknessgate.com/2012/09/07/x-ways-forensics/