X-Ways Forensics Practitioner's Guide

Beware the examiners who know X-Ways, for they likely know forensics." - Brett Shavers The X-Ways Forensics Practitioner's Guide, SECOND EDITION is more than a manual-it's a complete reference guide to the full use of one of the most powerful forensic applications available, software that is used by a wide array of law enforcement agencies and private forensic examiners on a daily basis.In the X-Ways Forensics Practitioner's Guide/2E, the author and contributors provide you with complete coverage of this powerful tool, walking you through configuration and X-Ways fundamentals, and then moving through case flow, creating and importing hash databases, digging into OS artifacts, and conducting searches. With X-Ways Forensics Practitioner's Guide/2E, you will be able to exploit X-Ways Forensics to its fullest potential. The book takes you from installation to the most advanced features of the software. Once you are familiar with the basic components of X-Ways, demonstrations of never-before-documented features using real life examples and information on how to present investigation results. The book culminates with chapters on reporting, triage and preview methods, as well as electronic discovery and cool X-Ways apps. Here's What You'll Learn From This Amazing Book for Forensic Practitioners: Installation and configuration to yourpreferences and needs. Case Management - Creating cases, managing cases, auditing your work, timelines, events, creating and adding evidence, and more. Imaging in the ways that only X-Ways can do! Cleansed images, Skeleton images, Snippet images, Reverse images, Memory images, Container files, and whole media forensic images. Navigating the interface with descriptive details on the checkboxes, the tri-state checkboxes, context menus, security options, and the mode buttons. Maneuvering around in the data and becoming not just comfortable, but confident in using all the features of X-Ways Forensics. Reporting in X-Ways Forensics has more options than you know what to do with in creating a report. With guidance, your XWF report will be awesome and easily display your evidence exactly as you want it. Pushing the limits of the most powerful feature of XWF, the Refined Volume Snapshot. All the options, tips & tricks on which to use for specifically targeted evidence and data. Avoiding user errors and ensuring that the evidence you need is effectively targeted and refined. Setting up and using XWF Internal Hash Database to compute hash values, compare hashes, DeNIST files, create your own hash sets, and find evidence, including FuZZy hashes! Plus Advanced XWF features! SEARCHING in X-Ways Forensics is unparalleled. If the only feature of XWF was its searching ability, it would still be a great value and tool. Yet, without knowing how to search, users are only using a fraction of the search capability, such as index searches, logical searches, physical searches, and regular expression (GREP) searches. BONUS MATERIAL! Case workflow ideas from a dozen XWF users! Third-party apps and X-Tensions! Keyboard shortcuts, XWF references and resources, and an entire appendix on the infamous XWF checkboxes and tri-state checkboxes! The XWF Practitioner's Guide, Second Edition is visual, descriptive, and authoritative.