* The DHT marker in JPEG files is now evaluated during metadata extraction. * Some internal revisions to the indexing algorithm. * Some GUI adjustments for high DPI settings in Windows. * Ability to open and interpret VHDX images right from within other images or file systems on disks parsed by X-Ways Forensics itself. Simply a button with an arrow in the directory browser options dialog, pointing to where the paths will be aligned. * Option to right-align the path columns in case you are more interested in the end of the path and would like to keep the column width compact. If not enabled, they become the alternative names, displayed in a lighter color in square brackets as additional information. eml files or original names of files in iPhone backups) become the new main names in a volume snapshot (and thus also potentially part of paths if they have child objects) is now optional. * The Report Table filter now has an option to output child objects of files at the same time, in addition to siblings. The "nRevision" field is now also extracted, which according to its documentation contains the number of save operations applied to a document. * Two additional internal metadata timestamps are now extracted from MS Word OLE2 compound file documents, which can be useful for corroboration. * Ability to show directory subtrees in Preview mode with directory sizes instead of or in addition to file counts (see new settings in Options | Viewer Programs). * Ability to interpret VHDX virtual machine disk images and add them to a case like other supported image types. * The phone alias table now has 2,850 entries and supports more than 13,000 camera models. The download link can be retrieved as always by querying one's license status. A preview version of X-Ways Forensics 19.8 is now available.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |