![]() red X files) are now generally excluded from volume snapshot refinement except if you specifically target them via tagging. ![]() Previously existing files whose first cluster is known to have been overwritten or whose first cluster is unknown (i.e. Such complex expressions required too much main memory in previous versions to run. Supports more complex GREP search expressions now than before. e01 evidence file, which may speed up processing in certain situations. New buffer system at work when reading from. Sorting by various columns noticeably accelerated.Ĭopying large files (Recover/Copy command and adding files to containers) accelerated. Speed for sorting by filename more than tripled. Hashing with the MD5 algorithm (the mere computation, excluding disk I/O for reading data) further accelerated in the 32-bit edition by ~30%, with SHA-1 by ~20%! (depends on the processor) Hashing in the 64-bit edition it is optimized, too, and even slightly faster than in the 32-bit edition.ĪES encryption and decryption (the mere computation) accelerated by 70% in the 64-bit edition and by 30% in the 32-bit edition. Improved ability to take a snapshot of volumes with many millions of files, especially in the 64-bit edition, but also in the 32-bit edition (if used with the /3GB switch or better in a 64-bit Windows). (Some users now think the 64-bit viewer component is for 64-bit Windows, but it is for 64-bit X-Ways Forensics.) ![]() X-Ways Forensics warns when trying to load the 64-bit viewer component from the 32-bit edition of X-Ways Forensics. hashing or encrypting) may also be faster in the 64-bit edition.Ī 64-bit edition of X-Ways Investigator will follow soon.Ī 64-bit edition of the viewer component is now also provided. Certain operations that are computationally intensive (e.g. SMART data extraction does not work), the 64-bit edition is recommended especially in situations where the 32-bit memory address space may be insufficient, when dealing with disks or images that contain many millions of files, or when dealing with many millions of search hits, provided that you have plenty of physical RAM installed. Both editions use exactly the same format for case files, volume snapshots, search hits etc…While not 100% of the functionality is available (e.g. etc are conveniently remembered and commonly used by both editions. ![]() Most other files are shared by both editions! That means that all your settings, search terms, file type signature definitions, file type category definitions etc. Additional files needed by the 64-bit edition are expected in a subdirectory named \圆4. exe file must be located in the same directory as the 32-bit xwforensics.exe file. You can simply add it to an installation of the 32-bit edition of X-Ways Forensics. A 64-bit edition of X-Ways Forensics and of the special WinHex version for licensed users of X-Ways Forensics is now available. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
January 2023
Categories |